how can i restrict a particular interface in privilege mode, like i want to stop a user

[Yasmeen]

how can i restrict a particular interface in privilege mode, like i want to stop a user to access interface gigabit 1/0/1 only ?

[Rick Morris]

Not quite sure I understand what you are asking, can you share more detail?

Are you wanting to allow a user to ONLY have access to make configuration changes to a specific interface?

Or

Are you asking how to NOT allow access to a user for a specific interface?

Do you have a TACACS server?

[Yasmeen]

*Are you asking how to NOT allow access to a user for a specific interface?*

Yes, i am asking to not allow a user for specific interface

like user1 cannot access a specific interface like int gi 1/0/1

user2 int gi 1/0/2

user3 int gi1/0/3

like 24 ports in a switch

*Do you have a TACACS server?*

no we don't have TACACS Server .

[Yasmeen]

Are you asking how to NOT allow access to a user for a specific interface?

yes, not allow a user to access a specific interface inside configure mode like 

user1 int gi1/0/1

user2 int gi1/0/2

user int gi1/0/3

like this wants to restrict 

Do you have a TACACS server ?

no we don't have TACACS server

[Georg Pauwen · Accepted solution]

Hello,

I think role-based CLI access is your only option. Have a look at the doc below (2.2.2.):

https://learningnetwork.cisco.com/docs/DOC-15878

[Yasmeen]

can u list out the Root view, CLI view, Super View Commands to support cisco switch  

[Yasmeen]

can u list out the Root view, CLI view, Super View Commands to support cisco switch  

[paul driver]

Hello

When you say user, you mean this user has CLI access to the switch and you wish them not to be able to change the detail of a specific port?

Or do you mean the user plugging a device into a specific port and not allowing access?

The later can be done at a l2 basis with a simple mac acl, if the below isnt the solution your looking for please elaborate the question above?

mac access-list extended STAN
deny   host aaaa.aaaa.aaaa any
deny   any host aaaa.aaaa.aaaa
permit any any

int x/x
mac access-group STAN in

res

Paul