partial access to sh runn

[ctivig]

How can I give a user access to the running config (sh run) except some of the lines (which contain the passwords) ?

Thanks,

C

[grayd]

Try adding "service password-encryption" to your config to encrypt the passwords so that users can't see them.

[ctivig]

:-)

This will still show the lines in the config.

I found a way to do it, it requires 12.2.8 still.

C

[m.walia]

Hi there, what was the way to do this. Also was did it just remove the lines of config, or mask sensitive config with "XXXXXX"?

Cheers.