create a non privilege user, which use all command SHOW

[Michaela Fell]

Hi, 

I need to create a non privilege user, but this user need to use all command SHOW. For authentication I must use radius server. 

Have you some ideas how can i configure it? 

[balaji.bandi]

here is the example guide to follow and setup one ;

https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/23383-showrun.html

[Reza Sharifi]

Hi,

The Radius protocol does not support command level authorization. That is mostly the job of ACS server.

Here is a document explaining Radius deployment but you may not be able to assign privileges. 

https://aaronwalrath.wordpress.com/2007/10/20/radius-authentication-for-cisco-router-logins/

HTH

[paul driver]

Hello
Locally you can do this - Try the follwoing:

username xxx privilege 1 secret xxxx
privilege exec level 1 show running-config
privilege exec level 1 show