use privilege level

[imnilesh]

Hi;

I have 45 branches, and having 1700 series rtr at each branch.also a tech support engineer is at each branch but i dont want to give him complete access to rtr but only few command which need to check the serial and to use ISDN dialup in case of ll failure. so want to give limited access to rtr.can i do it with help of user privilege command....

thanks..

//nil

[pflunkert]

Hi Nil,

you can seperate the privilege level like this:

username nil privilege 9 password 0 nils

username peter privilege 6 password 0 peter

username user privilege 15 password user

privilege configure level 8 snmp-server community

privilege exec level 6 show running

privilege exec level 8 configure terminal

The following link will help yoou.

http://www.cisco.com/en/US/partner/tech/tk59/technologies_tech_note09186a00800949d5.shtml

Regards

Peter

[imnilesh]

thnaks for ur reply;

can i define more that one command for a single user. e.g.: privilege exec level 8 configure terminal show run

[amit-singh]

Nope, That will not work.

[imnilesh]

ok..so each command at at time.....also

when user loging to rtr fro local lan through telnet...it should as user name and password...

but by default it ask privilege level 1 password..hos i can force user to put username and password....

[pflunkert]

Hi,

i hope i understand you...

The simplest way is that:

username user1 password password1

line vty 0 4

login local

Then the user must use a username/passowrd combination to login.

Regards

Peter