Re: Local Authorication

From: Thor Kopp (thorkopp@googlemail.com)
Date: Fri Jul 11 2008 - 10:06:42 ART


You need the 'privilege interface all level 2 encapsulation' command to be
able to see the encapsulation, in addition to the priv config level 2
interface as is listed above.

privilege interface level 2 ip access-group
privilege interface level 2 ip
privilege interface all level 2 encapsulation
privilege configure level 2 interface
privilege configure level 2 hostname
privilege exec level 2 show running-config
privilege exec level 2 show
- Thor
On Thu, Jul 10, 2008 at 5:50 PM, Luca Hall <lhall@setnine.com> wrote:

> add:
>
> priv config level 2 interface
>
>
> ----- Original Message -----
> From: Joseph Brunner <joe@affirmedsystems.com>
> To: 'Mark Stephanus Chandra' <mark.chandra@gmail.com>, 'Cisco
> certification' <ccielab@groupstudy.com>
> Sent: Thu, 10 Jul 2008 12:41:19 -0400 (EDT)
> Subject: RE: Local Authorication
>
> sure add
>
> privilege configure level 2 XXXXXXX
>
> where XXXXXX = the commands you want to let the level 2 see in the running
> conf.
>
> i.e.
>
> privilege configure level 2 crypto map
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Mark
> Stephanus Chandra
> Sent: Thursday, July 10, 2008 12:36 PM
> To: 'Cisco certification'
> Subject: Local Authorication
>
> Hi All,
>
>
>
> I have a question about Local Authorization.
>
>
>
> I have a question that I have to set a user that only can do show run
> command.
>
>
>
> Can see the following configuration :
>
>
>
> - hostname
>
> - interfaces
>
> - interface encapsulation
>
> - ip access-list applied in interface
>
>
>
> well, I have the solution to use p
>
>
>
> privilege interface level 2 ip access-group
>
> privilege exec level 2 show run
>
> privilege interface level 2 encapsulation
>
> privilege configure level 2 hostname
>
>
>
> but when I try to login with privilege 2 and do the show run, I only get
> this result :
>
> Building configuration...
>
>
>
>
>
> Current configuration : 69 bytes
>
> !
>
> !
>
> hostname R6
>
> !
>
> boot-start-marker
>
> boot-end-marker
>
> !
>
> !
>
> !
>
> !
>
> !
>
> !
>
> end
>
>
>
> I don't see any encapsulation interface, ip access-group.
>
>
>
> Did I do something worng ?
>
>
>
> Thanks in advance
>
>
>
> Mark Stephanus Chandra
> IT Consultant
>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>

-- 
Thanks,
Thor


This archive was generated by hypermail 2.1.4 : Mon Aug 04 2008 - 06:11:54 ART