From: Bill Eyer (beyer@optonline.net)
Date: Mon Sep 29 2008 - 08:19:09 ART
Darby,
Thanks
Bill
Darby Weaver wrote:
> Here's the procedure:
>
> Step 1: Enable ip rcmd
>
> router#conf t
> router(config)#ip rcmd rsh-enable
>
> Step 2: create a local user account. This is the user that you will
> be using the privileges of later as we demonstrate this command.
>
> router(config)#username darby privilege 15 password darby
>
> Remember that we need a privilege level high enough to execute the
> command in question.
>
> Step 3: We now need to add the use to the local authentication
> database. Note the IP address that we are going to be using rcmd from.
>
> router(config)#ip rcmd remote-host netadmin 192.168.1.224
> <http://192.168.1.224> darby enable 15
>
> Bascially we are going to give a remote user named netadmin the
> privileges of darby to login and issue rcmd commands.
>
> Step 4: Test the command from the device specified with the correct
> username (in this case netadmin).
>
> TS(config)#exit
> TS#rsh 192.168.1.51 <http://192.168.1.51> /user netadmin show run
> Building configuration...
>
> Output truncated...
>
> It's just my frame switch.
>
>
>
>
>
>
>
> On Sun, Sep 28, 2008 at 6:42 PM, Bill Eyer <beyer@optonline.net
> <mailto:beyer@optonline.net>> wrote:
>
> All, I am running into issue when trying to use rsh. Here is the
> relevent config:
>
> R2:
> hostname R2
> !
> no ip domain lookup
> ip rcmd rsh-enable
> ip rcmd remote-host cisco 100.100.100.4 <http://100.100.100.4/>
> rcisco enable
> !
> username cisco privilege 15 password 0 cisco
>
> interface Serial0/0
> ip address 100.100.100.2 <http://100.100.100.2/> 255.255.255.0
> <http://255.255.255.0/>
> encapsulation frame-relay
> frame-relay map ip 100.100.100.4 <http://100.100.100.4/> 204 broadcast
> no frame-relay inverse-arp
>
> R4:
> hostname R4
> !
> interface Serial1/0
> ip address 100.100.100.4 <http://100.100.100.4/> 255.255.255.0
> <http://255.255.255.0/>
> encapsulation frame-relay
> frame-relay map ip 100.100.100.2 <http://100.100.100.2/> 402 broadcast
> no frame-relay inverse-arp
>
> What I get:
> R4#rsh 100.100.100.2 <http://100.100.100.2/> /user rcisco show vers
> %Permission denied.
>
> Can anyone spot what I am missing?
>
> Bill
>
>
> Blogs and organic groups at http://www.ccie.net <http://www.ccie.net/>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sat Oct 04 2008 - 09:26:20 ART