Priv exec level not working

Answered Question
May 12th, 2008
User Badges:

Hi,


I want a user to be able to view the running config but not make any changes - I read somewhere that the way to do this was as follows:


privilege exec level 3 show running-config


username auser priv 3 password xxxxx


This works in that I'm able to log on as auser, but when I try to view the running config, all I see is:


arouter#sh run

Building configuration...


Current configuration : 49 bytes

!

boot-start-marker

boot-end-marker

!

!

!

!

end


Any help would be much appreciated.


Thanks,

J


Correct Answer by bvsnarayana03 about 8 years 11 months ago

hey, "sh startup-config" gives a full view of the configuration. Sh run doesnt work here.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Richard Burts Mon, 05/12/2008 - 03:06
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

J


I think that it is not possible to do what you are trying to do. One of the principles of IOS is that you can not see things in running config that you can not change. I believe that it reflects a security concern that if you can not change it in the config you should not see it in the config.


HTH


Rick

jigsaw2026 Mon, 05/12/2008 - 03:08
User Badges:


Thanks very much for your response Rick. So what is the best thing to do if you have a user that basically needs read only rights?


J

Richard Burts Mon, 05/12/2008 - 03:43
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

J


You might try show startup instead of show run. Give it a try and let us know what happens.


HTH


Rick

Pravin Phadte Mon, 05/12/2008 - 04:49
User Badges:
  • Silver, 250 points or more

try the command:



sh running-config view full



let us know if it helps


jigsaw2026 Mon, 05/12/2008 - 04:56
User Badges:

Sorry, it didn't help, but thank you for your reply.

Pravin Phadte Mon, 05/12/2008 - 05:11
User Badges:
  • Silver, 250 points or more

can you provide the configs.


also ios ver

Correct Answer
bvsnarayana03 Mon, 05/12/2008 - 05:17
User Badges:
  • Silver, 250 points or more

hey, "sh startup-config" gives a full view of the configuration. Sh run doesnt work here.

Pravin Phadte Mon, 05/12/2008 - 05:32
User Badges:
  • Silver, 250 points or more

well i guess i used some diffent command in which you can see the full config.


the below command show the full config

privilege exec all level 3 show running-config


that is only if you type

show running-config view full.


On the other hand all show commands are enabled..


there should be a way..... but need to work on this


jigsaw2026 Mon, 05/12/2008 - 05:42
User Badges:

This worked, thank you - that will be fine for the user's needs.

Pravin Phadte Mon, 05/12/2008 - 06:04
User Badges:
  • Silver, 250 points or more

so u using show startup confiig output ?

Actions

This Discussion