topic Re: Possible to hide commands? in Network Access Control

Possible to hide commands?

John Blakley — Sun, 10 Mar 2019 23:12:02 GMT

Is it possible to hide commands for lower privilege levels?

Thanks,

John

Re: Possible to hide commands?

John Blakley — Thu, 20 Nov 2008 21:39:14 GMT

I figured it out, so I'm going to let everyone know for those that don't.

If you have a user who has priv level 3, then the commands that you want to hide need to be configured for a higher priv level.

Running a '?' at the # prompt came up with a slew of commands to run, but wouldn't because they weren't granted access. I wanted to hide these, and in order to do so I did:

Router(config)# priv exec level 5 telnet

That hides the telnet command for priv level 3.

HTH,

John

Re: Possible to hide commands?

Jagdeep Gambhir — Sat, 22 Nov 2008 13:48:31 GMT

Here is the link,

http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800949d5.shtml

Re: Possible to hide commands?

srue — Mon, 24 Nov 2008 20:43:45 GMT

depending on what yo'ure trying to accomplish, sometimes its easier to go the other direction...

assign someone a lower privelege, then lower the privelege of the commands you want them to have.