01-31-2007 07:24 AM - edited 03-11-2019 02:26 AM
Hi.
I am trying to configure a username to allow some users to telnet to a PIX from the inside and execute 3 commands only
show crypto
show access-list
show run
I have used these commands
aaa-server LOCAL protocol local
telnet 1.1.1.1 255.255.255.255 inside
privilege show level 2 command run
privilege show level 2 command crypto
privilege show level 2 command running-config
username russell password PASSWORD privilege 2
When I do this and test. I get privelege level 2 when I login but I can run any command. PLease see below. Am i missing something obvious?
Rgds,
Russell.
Username: russell
Password: ********
Type help or '?' for a list of available commands.
PIX> login
Username: russell
Password: ********
PIX# sh curpriv
Username : russell
Current privilege level : 2
Current Mode/s : P_PRIV
01-31-2007 10:19 PM
Try adding the below command and check
aaa authorization command LOCAL
02-02-2007 12:21 AM
That worked a treat,
Thanks,
Russell.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide