From: Larry Roberts (larryr@netbeam.net)
Date: Sat Aug 02 2003 - 21:46:16 GMT-3
You can assign the show run command to a user at any privilege level. The
problem is that config that is displayed when that user executes the show
run will only contain commands available at the user's privilege level.
Therefore, the user will only see the relevant commands that he/she would be
able to configure. So you can logically do what you are asking but it is a
pain and you don't really gain much from it.
HTH,
Larry Roberts
CCIE #7886 (R&S / Security)
----- Original Message -----
From: "Ian Stong" <istong@stong.org>
To: <jfaure@sztele.com>; <ccielab@groupstudy.com>
Sent: Saturday, August 02, 2003 5:34 PM
Subject: RE: Privilege level commands
> Just saw your email - wondering if you received a working solution to
> this? If not let me know and I can try to come up with a solution for
> you.
>
> Ian
> http://www.ccie4u.com
> Rack Rentals and Lab Scenarios starting at $20
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> jfaure@sztele.com
> Sent: Saturday, August 02, 2003 9:45 AM
> To: ccielab@groupstudy.com
> Subject: Privilege level commands
>
> Hi folks:
>
> I'm "playing" with the IOS privilege level issue and i'd like to know if
> anyone can help to configure a user that were only capable to execute
> all
> the show comands, INCLUDING SH RUN, but that he were unable to modify
> the
> router config. All this must be accomplished NOT USING any way of AAA
> that
> relay the user rights in a server, this is, only using self IOS router
> issues.
>
> I've seen that with privilege 14, the user can't configure the router,
> but
> he can't do a sh run. Is there any way to add this capability (sh run)
> to
> the user that has privilege level 14?
>
> Regards
>
> Juan Faure Ferrer
> email: jfaure@sztele.com
>
> Lmnea de Negocio de Telematica y CC
> Ingeniero de Integracisn de Redes y Sistemas
> ------------------------------------------------------------------------
> ----
>
> SOLUZIONA TELECOMUNICACIONES
> Servicios Profesionales de UNION FENOSA
> Jerez, 3
> 28016 MADRID
> tel 91 579 30 00 fax 91 350 72 83
> ------------------------------------------------------------------------
> ---
>
>
> _______________________________________________________________________
> You are subscribed to the GroupStudy.com CCIE R&S Discussion Group.
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> _______________________________________________________________________
> You are subscribed to the GroupStudy.com CCIE R&S Discussion Group.
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Tue Sep 02 2003 - 18:53:52 GMT-3