From: Scott M Vermillion (scott_ccie_list@it-ag.com)
Date: Wed Dec 10 2008 - 01:27:15 ARST
Total coincidence occurred today that I thought was worth sharing. I'm
(finally) wrapping up a read of a book I bought for late-phase R&S lab prep
but just never got around to reading before the big day. It's a Cisco Press
book entitled "Router Security Strategies." In reading the "IP Management
Plane Security" chapter this evening I came across something referred to as
"Role-Based CLI Access." This, coincidently enough, is a function of the
parser! While it wouldn't by any stretch of the imagination be a means to
improve lab speed - which I think was the whole point of this thread - it
nevertheless strikes me as something worth at least knowing about. From
what I can tell playing with it briefly in my lab, it beats the hell out of
trying to deal with priv levels. Not to mention the fact that it's clearly
more granular and thus more powerful. So here's the best document on the
subject I could find on CCO (the discussion in the book is brief and a
little confusing to try to work from):
http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_role_ba
se_cli_ps6441_TSD_Products_Configuration_Guide_Chapter.html
Apologies in advance if this is completely common knowledge (it's been
around since 12.3(7)T after all) that has simply escaped me until now!
Certainly won't be the first nor the last such example if so...
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Scott M Vermillion
Sent: Tuesday, December 09, 2008 12:31 PM
To: 'Wouter Prins'; ccielab@groupstudy.com
Subject: RE: parser cache usage in the lab
To my knowledge it's enabled by default on pretty much everything. How,
specifically, were you planning/hoping to leverage this? The dump function
can theoretically be handy for helping to remember a command but often times
results in "TMI," IMHO (even when filtering w/ '| inc blah'). Or were you
thinking of macros which can be displayed by the parser?
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Wouter Prins
Sent: Tuesday, December 09, 2008 3:54 AM
To: ccielab@groupstudy.com
Subject: parser cache usage in the lab
Hi all,
I was wondering if the 'parser cache' command (available since 12.0)
is reliable enough for use in the actual lab with the goal to gain
more speed.
Any thoughts about this?
-- Wouter PrinsBlogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:08 ARST