Password Security

[gdelarosa]

I'm creating 4 different users in the routers on my network.

Let's name the users A,B,C and D.

I want that all of the users can access the configuration of the router, the only restriction that I want on users C and D is the configuration of the usernames and passwords.

So user A and B can create, remove or rename users or passwords, but users C and D can’t.

I gived privilege 15 to users A and B, but I don’t know what privilege to give on user C and D to restrict the user configuration.

It’s there any other form of doing this configuration??

Example:

---------------------------------------

username A privilege 15 secret XXX

username B privilege 15 secret XXX

username C password XXX

username D password XXX

---------------------------------------

Thanks!!

[naveen.venkatesh]

Hi,

You can either create the privilege level lesser than 15 for user C & D and specify the commands in the privilege mode that C & D users can execute.

I believe that configuring a privilege option on the router will allow to specifiy each command that a user in a level can execute. If you want the user C & D to access all commands except for user/pass commands, then you should have a Cisco ACS Server.

refer the below link for configuring privilege levels.

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca7d1.html

thanks,

Naveen V