Catalyst 9300 Privilege Level for Show Run

[e10v]

Specifically the 9300, I have set the show running and show startup commands to privilege level 10. I assign a user to that level and run the show running command I get no output, no error, just goes to a new line. When I run show config, i get the first line with the size of the config and bytes available. Has anyone been able to change the privilege level for show config commands and successfully assign a user to it?

[Mark Malone]

Hi
what version are you on ?
post your config ill test it on my LAB 9300s ,see if its software related , im running fuji i think currently 16.8.1 , if it works on mine probably a bug if its same may be something extra required on 9ks , ive seen a few discrepancies in config commands compared to 3k and 4k switches

[e10v]

I’m on 16.8.1a.

username UserName privilege 10 secret 5 blahblahblah

privilege exec level 10 show startup-config
privilege exec level 10 show running-config
privilege exec level 10 show config
privilege exec level 10 show

[Fcontreras]

Hello , I have the same proble with Cisco 9400 and 9300.
You resolved the problem?

[e10v]

Yes, I had to modify the command in the monitoring software to be show running-config view full.

[Fcontreras]

Sorry, but the monitoring software has access to the computer with local users with privilege 14, that is, the privilege is granted to the switch, not to the monitoring equipment. I explain?

first of all, Thanks.

[e10v]

The privilege level doesn’t matter as long as it is not 15. What is important is the commands you use should be allowed for the privilege number in your configuration.

[Fcontreras]

privilege exec level 14 clock
privilege exec level 14 traceroute ip
privilege exec level 14 traceroute
privilege exec level 14 ping ip
privilege exec level 14 ping
privilege exec level 14 show running-config view full
privilege exec level 14 show running-config view
privilege exec level 14 show running-config
privilege exec level 1 show configuration
privilege exec level 14 show logging
privilege exec level 1 show
privilege exec level 14 clear ip accounting
privilege exec level 14 clear ip route
privilege exec level 14 clear ip
privilege exec level 14 clear arp-cache
privilege exec level 14 clear counters
privilege exec level 14 clear

This is the configuration that the switch has. User 14 can execute all commands except "show running"