Configure interface

[maxime.frolov]

Hello,

does anybody know if it is possible using aaa and privilage level commands to let a user to configure a specific interface on Catalyst 2950 switch (IOS version 12.1(22)EA4) ? For example, a FastEthernet interface but not the Giga interface.

Thanks in advance.

Maxime Frolov

[spremkumar]

hi

i dont think its possible with different privilege level you can achieve limiting or restrict the config part to some particular ports.

Except privilege level 15 you wont be able to give config access to any other privilege levels.

If you try something inline i feel you will get very limited around 5 or 6 commands under the config prompt which wont help u at all to do the configs..

regds

[maxime.frolov]

Hello,

I think I can let a user with a privelege level 3 to configure interfaces if I put the following commands in the config :

username labo2 privilege 3 secret 5 XXXXXXXXXXX

privilege configure level 3 interface

privilege interface level 3 duplex

privilege interface level 3 speed

etc..

The problem is the user labo2 will be able to configure speed not only ont the FastEthenet interfaces but also ont the Giga interfaces. Do you know if there is any way to avoid it or it's just impossible.

Thanks.

Maxime

[spremkumar]

hi

AFAIK you cant change for particular interface if you configure for interface then it will be for all the interface present in the box.

regds