topic Configure interface in Network Access Control

Configure interface

maxime.frolov — Sun, 10 Mar 2019 21:19:57 GMT

Hello,

does anybody know if it is possible using aaa and privilage level commands to let a user to configure a specific interface on Catalyst 2950 switch (IOS version 12.1(22)EA4) ? For example, a FastEthernet interface but not the Giga interface.

Thanks in advance.

Maxime Frolov

Re: Configure interface

spremkumar — Wed, 05 Oct 2005 05:54:30 GMT

i dont think its possible with different privilege level you can achieve limiting or restrict the config part to some particular ports.

Except privilege level 15 you wont be able to give config access to any other privilege levels.

If you try something inline i feel you will get very limited around 5 or 6 commands under the config prompt which wont help u at all to do the configs..

regds

Re: Configure interface

maxime.frolov — Wed, 05 Oct 2005 08:58:42 GMT

Hello,

I think I can let a user with a privelege level 3 to configure interfaces if I put the following commands in the config :

username labo2 privilege 3 secret 5 XXXXXXXXXXX

privilege configure level 3 interface

privilege interface level 3 duplex

privilege interface level 3 speed

etc..

The problem is the user labo2 will be able to configure speed not only ont the FastEthenet interfaces but also ont the Giga interfaces. Do you know if there is any way to avoid it or it's just impossible.

Thanks.

Maxime

Re: Configure interface

spremkumar — Wed, 05 Oct 2005 10:07:42 GMT

AFAIK you cant change for particular interface if you configure for interface then it will be for all the interface present in the box.

regds