cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
461
Views
0
Helpful
1
Replies

Using role based views !

Jonn cos
Level 4
Level 4

Hi all experts.

i have configured the following on R1

username itsupport view ITSUPPORT password cisco123

aaa new-model

aaa authentication login default local

parser view ITSUPPORT

secret 0 **************

commands exec include configrue terminal

line vty 0 4

Now when i telnet this router, why doesnt the view is applying ? This the result i am getting

User Access Verification

Username: itsupport

Password:

R1>?

Exec commands:

  <1-99>               Session number to resume

  access-enable        Create a temporary Access-List entry

  access-profile       Apply user-profile to interface

  clear                Reset functions

  connect              Open a terminal connection

  credential           load the credential info from file system

  crypto               Encryption related commands.

  disable              Turn off privileged commands

  disconnect           Disconnect an existing network connection

  enable               Turn on privileged commands

  exit                 Exit from the EXEC

  help                 Description of the interactive help system

  lock                 Lock the terminal

  login                Log in as a particular user

  logout               Exit from the EXEC

  modemui              Start a modem-like user interface

  mrinfo               Request neighbor and version information from a

                       multicast router

  mstat                Show statistics after multiple multicast traceroutes

  mtrace               Trace reverse multicast path from destination to source

  name-connection      Name an existing network connection

  pad                  Open a X.29 PAD connection

R1>

I am 100% sure that i was able to successfuly apply view to this username, and after login, i was only able to access configure terminal command, but dont know why its not working now. Can someone help me out in this, what i am doing wrong, this is the right way of associating the view with username right ?

1 Reply 1

cadet alain
VIP Alumni
VIP Alumni

Hi,

add these 2 lines:

-aaa authorization console

-aaa authorization exec default local

Regards.

Alain.

Don't forget to rate helpful posts.
Review Cisco Networking products for a $25 gift card