Unanswered Question
Dec 17th, 2008
User Badges:

Hi all,

I need to permit some local users to access the router by ssh or telnet, but him need to see all configuration.

Someone how do I do this?

NOTES: The users will be configured local and have to access only read of show running-config.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Richard Burts Wed, 12/17/2008 - 11:19
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN


I do not believe that there is a good way to achieve what you want on the router. It is not difficult to change the privilege level of the show running-config command. But the way that IOS works when you lower the privilege level of show running-config people can execute it but they will not see configuration lines which they do not have privilege level to modify. So these users would see very little of the actual config.

Perhaps it might be possible to store the router config files on some server and to grant read only access to them on that server?




This Discussion