I have a handful of 2960s that I have privilege levels configured for our QA department to login and change vlan port assignments. I configured them identically but one will not allow that user to change vlans.
The commands that I am using on all of the switches (that works on the other two) are below:
!
privilege interface level 5 switchport
privilege interface level 5 description
privilege configure level 5 interface
privilege exec level 5 configure terminal
privilege exec level 5 configure
privilege exec level 5 show vlan
privilege exec level 5 show running-config
privilege exec level 5 show
!
The user logs in via Radius (NPS) and has the privilege level set to 5 there, so when they login the perms match and they can do what I allow them to. However on a certain 2960 it gives them this when attempting to change the vlan:
sw86#show privilege
Current privilege level is 5
sw86#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ws86(config)#int gi1/0/31
sw86(config-if)#switchport acc?
% Unrecognized command
sw86(config-if)#switchport acc
ON a working switch (identical privilege commands...I copied them from there):
sw88#show privilege
Current privilege level is 5
sw88#conf t
Enter configuration commands, one per line. End with CNTL/Z.
sw88(config)#int gi1/0/7
sw88(config-if)#sw
sw88(config-if)#switchport acc
sw88(config-if)#switchport access vlan ?
<1-4094> VLAN ID of the VLAN when this port is in access mode
Any idea what or where the problem is?
