I am trying to create a custom role for a local user on the switch. Does anyone have some experience? I only want it to have access to do these 3 commands:
show queuing interface ethernet 1/3
show interface ethernet 1/3 counters detailed
show interface port-channel 3 counters detailed
this is the config I came up with, but I must be missing something...
Role: overrunROLE
Description: ROLE for locking down overrun user
vsan policy: permit (default)
Vlan policy: deny
Permitted vlans: none
Interface policy: deny
Permitted interfaces:
port-channel3
Ethernet1/3
Vrf policy: deny
Permitted vrfs:
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
4 permit command show queuing interface ethernet 1/3
3 permit command show interface ethernet 1/3 counters detailed
2 permit command show interface port-channel 3 counters detailed
This is what happens on the switch when I try to enter the commands I can go as far as entering the interface number and then I get the permission deny error.
n5k# ?
configure Enter configuration mode
show Show running system information
end Go to exec mode
exit Exit from command interpreter
n5k# show ?
interface Show interface status and information
queuing Show interface queuing information
n5k# show interface ?
<CR>
> Redirect it to a file
>> Redirect it to a file in append mode
ethernet Ethernet IEEE 802.3z
port-channel Port Channel interface
| Pipe command output to filter
n5k# show interface ethernet 1/3
% Permission denied for the role
n5k# show interface port-channel 3
% Permission denied for the role
n5k# show queuing interface ?
<CR>
> Redirect it to a file
>> Redirect it to a file in append mode
ethernet Ethernet IEEE 802.3z
| Pipe command output to filter
n5k# show queuing interface ethernet 1/3
% Permission denied for the role
