cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
733
Views
0
Helpful
0
Replies

Role-Based CLI Views with restrictions

Jacob Zartmann
Level 1
Level 1

Hi,

I'm struggling with configuring a Role-Based CLI View that allows users in the view to configure an interface but not being able to delete it.

This is my view configuration:

parser view my_view

secret 0 123

commands exec include copy running-config startup-config

commands exec include write memory

commands exec include traceroute

commands exec include ping

commands exec include configure terminal

commands exec include all show

commands exec include all debug

commands configure include interface Dialer1

commands configure include interface FastEthernet0

commands configure include interface FastEthernet4

commands configure include interface Tunnel1

commands configure include interface Tunnel2

commands configure include interface Vlan100

commands configure include ip route

commands configure include no ip route

commands interface include tunnel source

commands interface include all ppp pap sent-username

commands interface include ppp chap password

commands interface include ppp chap hostname

commands interface include pppoe-client dial-pool-number

commands interface include dialer pool

commands interface include shutdown

commands interface include no shutdown

commands interface include ip access-group

commands interface include no ip access-group

commands interface include ip address

commands interface include no ip address

This is what i see:

router(config)>no ?

  do         To run exec commands in config mode

  exit       Exit from configure mode

  interface  Select an interface to configure

  ip         Global IP configuration subcommands

Is there some way I can prohibit the use of 'no interface' from the view? I've tried issuing this:

router(config-view)# commands configure exclude no interface

% Interface not configured or present

Any suggestions?

Thank you.

/JZN

0 Replies 0