Configuring privilege issue

[nomanbari]

Hi,

I need some help here. I am trying to configure a router for access privileges.

Following is the configuration:-

enable secret level xxx

privilege configure level 14 interface

privilege configure level 14 interface shutdown

privilege configure level 14 interface no shutdown

privilege configure level 14 interface ip address

privilege configure level 14 interface no ip address

privilege exec level 14 show run

privilege exec level 14 configure terminal

privilege exec level 14 show startup

Problem is that though user can login in access level 14 but he faces two issues:-

1. sh run output is appears only as

Building configuration...

Current configuration : 80 bytes

!

!

!

interface Tunnel0

!

interface FastEthernet0/0

!

interface Async5

!

!

end

But sh startup is completely shown with all the information.

2. User can enter interface config mode but if he tries to configure ip address or shutdown interface, it doesn't work.

Any help will be greatly appreciated.

--Noman Bari

[mustafa_nbk]

Hi,

As startup-configuration saved in nvram so you can view the full startup-cnfiguration if you have privilege to access show startup command, While show run config run from dram, so it will show the only configurations which you have a change access.

Now to use "IP address" and "shutdown" command via level 14 user, Use following command.

privilege interface level 14 no shutdown

privilege interface level 14 shutdown

privilege interface all level 14 no ip address

privilege interface level 14 no ip

privilege interface level 14 no

privilege interface all level 14 ip address

privilege interface level 14 ip

privilege configure all level 14 interface

privilege exec level 14 configure terminal

privilege exec level 14 configure

Thanks,

Mustafa