From: Derek Small \(Fuse\) (dwsmall@xxxxxxxxxx)
Date: Fri May 05 2000 - 12:51:22 GMT-3
Yes. You have to think of it not so much as granting permission or not, but
simply changing the default permission level from one value to another.
Every command has a privilege level by default, you just need to set it to
either 0 or 15 to change it from one to the other. If you want to get
really granular, you can use login local, again local user accounts on the
router. Then assign each user a different privilege level. The commands do
flow down though so if you allow a user with access level 0 to run a
command, then users with privilege level of anything higher than 0
inclusive, can run the command also.
Derek Small
CCIE # 5832
dwsmall@fatkid.com
----- Original Message -----
From: <Dana_L_Steffey@notes.seagate.com>
To: "Derek Small (Fuse)" <dwsmall@fatkid.com>
Cc: <ccielab@groupstudy.com>
Sent: Friday, May 05, 2000 11:15 AM
Subject: Re: Disable a command
Derek -
Since I'm not in front of my lab I'll just ask the question -
Is the reverse also true - can I give non privileged user's privileged
access - something like
privilege exec level 1 clear - (for a 'clear ip route *')
Dana
"Derek Small \(Fuse\)" <dwsmall@fatkid.com>@groupstudy.com on 05/04/2000
01:50:39 PM
Please respond to "Derek Small \(Fuse\)" <dwsmall@fatkid.com>
Sent by: nobody@groupstudy.com
To: "Li Chaoyong \(Company\)" <hughcyli@holybridge.com.cn>, "GroupStudy
CCIE" <ccielab@groupstudy.com>
cc:
Subject: Re: Disable a command
Use the privilege command, like this;
privilege exec level 15 ping
to disable a user from being able to ping from the > prompt.
Derek Small
CCIE # 5832
dwsmall@fatkid.com
----- Original Message -----
From: Li Chaoyong (Company)
To: GroupStudy CCIE
Sent: Thursday, May 04, 2000 10:34 AM
Subject: Disable a command
How to disable users run a command in non-priviledge level.
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:27 GMT-3