Does network-operator role in NXOS 9.3 has right to backup config ?

Kwuenph · ‎06-18-2022

Hi all,

I've working with NXOS for a while, mostly nexus 3000s, and today I have an issue with role"network-operator".

Basically, an user belong to network-operator can not "show running-config or startup-config" but what if network-operator could copy running-config to other location to view ? Is it possible ?

marce1000 · ‎06-18-2022

- I would presume not , do you have possibility to test ?

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Kwuenph · ‎06-18-2022

Thank for your response.

I've tried and the closest thing was "copy license" command.

However, when I set community string group network-operator, somehow the network OpManager could show the running config.

So I wonder, is it a vulnerability of NXOS or my mistake when set up snmp ?

part of configure

snmp-server community r4&TkX54TUSFh ro
snmp-server community r4&TkX54TUSFh use-ipv4acl Limmit-SNMP

marce1000 · ‎06-18-2022

- You may verify this with the command : show cli syntax roles network-operator

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '