How to restrict the output of "show run" command on Cisco Nexus 3000 without blocking it

[jake1905]

Hi all,

Due to our specific need I am trying to find a way to restrict the output of show run command on nexus 3000 series switches without blocking the command.  We use local authentication on this switch (no tacacs+ is considered for this environment). 

I know it is possible to block user from running show run and other commands through privilege roles. However that is not what we need. 

For example: I need "show run" to show everything except users, L3 interfaces, multicast... 

Is what I am trying to achieve is possible?

Thanks in advance,

jacob

[Mark Malone · Accepted solution]

Hi
You would have to do that through an EEM script i would think its not possible in standard syntax , i did it with menus on Cisco ios as the commands were so many when we ran show run it was taking ages , so we hid anything that contained the word menu whenever the show run command was initiated , this would be unsupported but you may be able to tweak it for what you need , if your blocking alot thi sis going take some testing to get right , whether its worth putting all that time in is another question

Example
event manager applet MenuBlock
description Hide Menu And Alias Syntax From Running-Config Output
event cli pattern "show running-config[[ ]]*$" sync yes default 2000 maxrun 1200
action 111 cli command "enable"
action 112 cli command "show run | excl menu|alias"
action 113 puts "$_cli_result"
action 114 set _exit_status "0"
action 115 comment "End Script As Show Run Complete, Any Issue Check - Show event manager history events"

[jake1905 · Accepted solution]

Hi Mark. Thank you for the quick response. i will try and post the outcome here.

Best,
jacob