Local authorization query

[Jonn cos]

Hi all experts.

I am using ACS to provide authentication and accounting purpose. But when ACS is not reachable (tunnel is not up but WAN ip is reachable or something like that) i am able to login to remote router via local username and able to do level 15 configuration. My requirement is as follows

1) I want to create 2 username. User1 and User2. Both of them should have access to all level 15 configuration.

2) Only restriction is that, User1 should not be able to delete or create new "ip sla" objects, like he should not be allowed to perform the following configuration

ip sla 1 or ip sla monitor 1 or ip rtr

Can someone pls guide me how to do this ?

[cadet alain]

Hi,

I think easiest way to do this if your IOS supports this feature is to use role-based CLI aka  views.

Regards.

[Panos Kampanakis]

A link that explains how to set it up

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtclivws.html

I hope it helps.

PK