From: Huan Pham (Huan.Pham@peopletelecom.com.au)
Date: Thu Jun 26 2008 - 02:39:18 ART
I have two options for you.
1 - Put customer in a low privilege and move the show start-up into that
level (e.g. level 5). Customer can then view the full config, without
able to make any change.
2 - Use a fixed options menu for customer, to do show run, show
interface etc. Customer is set to privilege 15 but he is not allowed in
prompt mode to be able to execute any IOS command line.
Here's a sample config.
username customer privilege 15 password 0 cisco
username customer autocommand menu CUSTOMER
menu CUSTOMER title ^C
Wellcome Customer!
Please seat back, relax and enjoy the SHOW.
No touching is allowed ;-) . When done, please type 9 to exit.
^C
menu CUSTOMER text 1 Show run
menu CUSTOMER command 1 show run
menu CUSTOMER text 2 Other options
menu CUSTOMER text 9 Exit
menu CUSTOMER command 9 exit
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Amir.Tahir/Wateen/Lahore
Sent: Thursday, 26 June 2008 2:45 PM
To: ccielab@groupstudy.com
Subject: Privilege Level & sh run
Hi Experts,
I am trying to give my client privilege to check sh running
configuration but won't allow him to go to configuration level. I tried
to control it with Privilege level but Router does not show full
configuration on Level 3 or level 5.
In addition, if I am not wrong, we could set a router in such a way that
if someone telnet on specified line, we could give him output as sh run
and close the connection.
I will be thankful if you could give me a reference or guide me how to
handle this task
Thanks for help in advance
Regards/AT
__________________
This archive was generated by hypermail 2.1.4 : Tue Jul 01 2008 - 06:23:23 ART