Here is a set of examples, where the listed commands are typed in the CLI:
- ‟show”
- ‟show router”
- ‟show port 1/1/1”
- ‟configure port 1/1/1 description ‟my port”
This results in the following AV pairs:
cmd=show
cmd=show
cmd-arg=router
cmd=show
cmd-arg=port
cmd-arg=1/1/1
cmd=configure
cmd-arg=port
cmd-arg=1/1/1
cmd-arg=description
cmd-arg=my port
For TACACS+ authorization, the SR OS sends the entire CLI context in the cmd and cmd-arg and values. Here is a set of examples where the CLI context is different:
- *A:dut-c# configure service
- *A:dut-c>config>service# vprn 555 customer 1 create
- *A:dut-c>config>service>vprn$ shutdown
This results in the following AV pairs:
cmd=configure
cmd-arg=service
cmd=configure
cmd-arg=service
cmd-arg=vprn
cmd-arg="555"
cmd-arg=customer
cmd-arg=1
cmd-arg=create
cmd=configure
cmd-arg=service
cmd-arg=vprn
cmd-arg="555"
cmd-arg=customer
cmd-arg=1
cmd-arg=create
cmd-arg=shutdown