setting privilege levels on a router

[bigrut]

we have set privilege levels to 10 for several local accounts. all of the commands we allow seem to work fine except "show running-config". The output below is all we see when we do sho run. is this correct or is there something else we need to do?

Current configuration : 161 bytes

!

! Last configuration change at 18:49:13 UTC Sat Jun 28 2003 by rutledgek

! NVRAM config last updated at 18:26:35 UTC Sat Jun 28 2003 by rutledgek

!

!

!

!

end

[ERIK LAWAETZ]

This is actually correct behaviour.

The essance of it is that all the configuration commands are at privilege level 15, so IOS is showing you the parts of the configuration allowed at privilege level 10.

An alternative is to define a local user with an "autocommand" that allows access to reading the config only:

username readconfig password xxx

username readconfig privilege 15

username readconfig autocommand sh running

[bigrut]

Thanks, I'll try it.