Disable Commands via Local Login Possible?

[sean.cline]

Is it possable to allow or disaprove users to enter spesific commands while having access to others?

For example I would want a notmal user to have no configureation commands but be able to clear lines? (seams they need Privlage 15 to do it)

Also not allow certain users to "show run" ect though are able to configure the device. I have herd Juniper allow something like this though I am not aware of Cisco allowing such feature.

[johnlloyd_13 · Accepted solution]

Hi Sean,

There's a feature called role-based CLI. See useful link below:

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtclivws.html

Sent from Cisco Technical Support iPhone App