The goal....

1. local usernames on a router to control access

2. Use privilege levels in the username command to reflect what a user is allowed to do

3. Define a set of commands available to users with privilege level 1

My trouble here is that I cannot seem to find this exact combination of commands for what I want to do on CCO or Google. I have tried several combinations and here is what I have so far, but its not working.

aaa new-model

!

aaa authentication login default local

aaa authorization commands 1 default local

!

username engineer priv 15 pass XXXX

username tech priv 1 pass XXXX

!

privilege exec level 1 traceroute


privilege exec level 1 ping

!