restrict console command access

[Martinus P. J. Moerman]

Hello,

I have a 887 and I want to restrict the access to my router.

I want to have an username and password on which the user can only do like

sh run

sh ip int br

How can I do that without giving them complete access to the router.

help !

Martin

[Marvin Rhoads]

You can do this with the Role-Based Access control (RBAC) feature. You basically setup parser views that explicitly define which commands the user can enter.

Please see this document for details on how to set that up.