I want to figure out how I can use EEM to prevent all users from running a "no" command on a particular interface.
Normally I would right something like:
event manager applet PREVENT-POLICY-MAP-REMOVAL
event cli pattern "no *" sync no skip yes
action 1.0 syslog msg "DO NOT REMOVE A SERVICE POLICIES FROM THIS PORT"
However, this would prevent the command under all configuration modes. I just want the EEM script to protect a single ethernet port. Without using AAA authorization (local privileges) or TACACS authorization, how could I do this?
