取消
显示结果 
搜索替代 
您的意思是: 
cancel
13767
查看次数
30
有帮助
9
回复

关于在Cisco路由器上创建仅可以show run的只读用户?

zjliao
Spotlight
Spotlight
需求描述:
需要在cisco路由器设备本地建立一个账号,非AAA用户,账号为仅可以show run的只读用户,需要如何配置?
已尝试给账号配置1-12的权限皆无法show run
1 个已接受解答

已接受的解答
9 条回复9

cruiseluo
Spotlight
Spotlight

Mansur
Spotlight
Spotlight
可以吧show run添加到级别1里面
privilege exec level 1 show running

YilinChen
Spotlight
Spotlight
可以实现,楼上已经有答案了

wuleihen
Spotlight
Spotlight
正解,可以指定需要的命令放入一个级别中的

zjliao
Spotlight
Spotlight
maguanghua2013 发表于 2018-4-3 17:48
可以吧show run添加到级别1里面
privilege exec level 1 show running

谢谢你的解答,我尝试配置的过程如下,给privilege 1允许其show run的命令后尝试show run,显示的内容为空,无法查看完整的show run内容
Wsjy-C2960x-111-7#show run | in user
username test password 7 03105E18125E731F
Wsjy-C2960x-111-7#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Wsjy-C2960x-111-7(config)#privilege exec level 1 show running
Wsjy-C2960x-111-7(config)#end
Wsjy-C2960x-111-7#wr
Building configuration...
000040: Apr 4 17:53:38.949 Beijing: %SYS-5-CONFIG_I: Configured from console by test on console[OK]
Wsjy-C2960x-111-7#
Wsjy-C2960x-111-7#exit
Wsjy-C2960x-111-7 con0 is now available
Press RETURN to get started.
User Access Verification
Username: test
Password:
Wsjy-C2960x-111-7>show run
Building configuration...
Current configuration : 197 bytes
!
! Last configuration change at 17:53:38 Beijing Wed Apr 4 2018 by test
! NVRAM config last updated at 17:53:39 Beijing Wed Apr 4 2018 by test
!
boot-start-marker
boot-end-marker
!
!
!
!
!
!
end
Wsjy-C2960x-111-7>
Wsjy-C2960x-111-7>

Mansur
Spotlight
Spotlight
woliaozhijun 发表于 2018-4-4 10:03
谢谢你的解答,我尝试配置的过程如下,给privilege 1允许其show run的命令后尝试show run,显示的内容为 ...

好像是还要给config term权限,
看看这个:
https://www.cisco.com/c/zh_cn/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/23383-showrun.html

zjliao
Spotlight
Spotlight
cruiseluo 发表于 2018-4-4 16:21
看一个以前的帖子:http://bbs.csc-china.com.cn/forum.php?mod=viewthread&tid=984745&page=1#pid1017027

非常感谢您的解答:lol

SMG-SH
Level 7
Level 7
学习了,这个帖子

SMG-SH
Level 7
Level 7
学习了,这个答案
快捷链接