User PC Access control

[Anirudh Yadav]

How to disable all the commands that run on privilege exec mode [ router# ] and only enable basic t-shoot commands like extended Ping & traceroute from a user PC that has a remote telnet connection of a router?

[Mark Malone]

You can use privilege commands to allow the user only user certain commands and see certain outputs when he logs in based on his login account

http://www.packetu.com/2012/09/06/changing-privilege-levels-for-cisco-ios-commands/

[Manish Gogna]

Hi,

You can configure role-based CLI access as per the following

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtclivws.html#wp1043332

https://supportforums.cisco.com/discussion/11416476/create-username-run-only-all-show-commands-cisco-switches-routers

Manish

- Do rate helpful posts -

[Milos Megis]

If user login into privilege level 1 (prompt: Router>) then he will have only few commands including traceroute and ping.

But in common you can specify privilege levels from 2 to 14 where you can allow your commands. And higher level also has all commands from lower level.
Or you can use Tacacs server for access control.

[paul driver]

Hello 

Attached is a file that i did for our desktop guys to be able to login the switches so they could enable ports and to check the status.

So for your request try:

Privilege exec level 2 show interface x/x
Privilege exec level 2 show interface brief
Privilege exec level 2 ping
Privilege exec level 2 traceroute

username STAN privilege 2 secret xxxx
username STANadmin privilege 15 secret xxxx

line xxx
login local

res
Paul