Solved: Priv exec level not working

jigsaw2026 · ‎05-12-2008

Hi,

I want a user to be able to view the running config but not make any changes - I read somewhere that the way to do this was as follows:

privilege exec level 3 show running-config

username auser priv 3 password xxxxx

This works in that I'm able to log on as auser, but when I try to view the running config, all I see is:

arouter#sh run

Building configuration...

Current configuration : 49 bytes

!

boot-start-marker

boot-end-marker

!

end

Any help would be much appreciated.

Thanks,

J

bvsnarayana03 · ‎05-12-2008

hey, "sh startup-config" gives a full view of the configuration. Sh run doesnt work here.

View solution in original post

Richard Burts · ‎05-12-2008

J

I think that it is not possible to do what you are trying to do. One of the principles of IOS is that you can not see things in running config that you can not change. I believe that it reflects a security concern that if you can not change it in the config you should not see it in the config.

HTH

Rick

HTH

Rick

jigsaw2026 · ‎05-12-2008

Thanks very much for your response Rick. So what is the best thing to do if you have a user that basically needs read only rights?

J

Richard Burts · ‎05-12-2008

J

You might try show startup instead of show run. Give it a try and let us know what happens.

HTH

Rick

HTH

Rick

Pravin Phadte · ‎05-12-2008

try the command:

sh running-config view full

let us know if it helps

jigsaw2026 · ‎05-12-2008

Sorry, it didn't help, but thank you for your reply.

Pravin Phadte · ‎05-12-2008

can you provide the configs.

also ios ver

bvsnarayana03 · ‎05-12-2008

hey, "sh startup-config" gives a full view of the configuration. Sh run doesnt work here.

Pravin Phadte · ‎05-12-2008

well i guess i used some diffent command in which you can see the full config.

the below command show the full config

privilege exec all level 3 show running-config

that is only if you type

show running-config view full.

On the other hand all show commands are enabled..

there should be a way..... but need to work on this

jigsaw2026 · ‎05-12-2008

Thanks all for your input - much appreciated.

jigsaw2026 · ‎05-12-2008

This worked, thank you - that will be fine for the user's needs.

Pravin Phadte · ‎05-12-2008

so u using show startup confiig output ?

jigsaw2026 · ‎05-12-2008

I'm using:

priv exec level 3 show startup-config