05-13-2013 09:59 AM - edited 03-07-2019 01:20 PM
I've just created a local user on router but whoever uses that account I would like them only have access to show commands and that's all no other commands. Can someone please guide me on how to accomplish this?
Thanks!
05-13-2013 10:44 AM
Role based CLI access would be great for this, but is a relatively recent addition to IOS, you need to be running 12.3(7)T or newer.
If you have a vertion of code that supports it, here is a good presentation on configuring it.
05-13-2013 11:05 AM
If you want the person to have access to show commands, you can give him privilege 3
example
user test pass test123
user test privilege 3
if you want user test to be able to see the config also, you can add this command:
privi exe leve 3 show configuration
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide