topic Re: Custom privilege level for CSM commands in Application Networking

Custom privilege level for CSM commands

jrichterkessing — Fri, 12 May 2006 13:05:28 GMT

Is there a way to creat a custom privilege level to allow a user access to only CSM config commands while in config mode?? I'm trying to allow members of our server/web team to check on the status of the web servers and to take them out of service for maintenance....and not allow them access to change any other configs on the switch.

Thanks...Jeff

Re: Custom privilege level for CSM commands

fmeetz — Thu, 18 May 2006 13:08:43 GMT

No. I don't think there is way to creat a custom privilege level to allow a user access to only CSM config commands while in config mode

Re: Custom privilege level for CSM commands

savyer — Sun, 21 May 2006 06:13:12 GMT

You can do it with TACACS config authorization enabled.

Create a shell command list on ACS/TACACS and apply to the user.

Re: Custom privilege level for CSM commands

mruuth — Tue, 30 May 2006 13:58:25 GMT

Here is an exampel for enable 5

enable secret level 5

privilege slb-lam-mode-real level 5 no inservice

privilege slb-lam-mode-real level 5 inservice

privilege slb-lam-mode-real level 5 inservice standby

privilege slb-lam-mode-csm-sfarm level 5 real

privilege slb-lam-mode-csm-sfarm level 5 real name

privilege slb-lam-mode-csm level 5 server

privilege configure level 5 module csm

privilege exec level 5 conf t

privilege exec level 5 exit

Re: Custom privilege level for CSM commands

jrichterkessing — Wed, 31 May 2006 12:10:16 GMT

Thanks for the responses. I am currently running aaa with Radius, so I had to use local accounts to assign custom priviledge levels. Thanks Mats for the command strings.

Jeff