Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
406
Views
0
Helpful
4
Replies

PRIVILEGE COMMAND

delahais
Level 1
Level 1

‎02-25-2009 08:03 AM - edited ‎03-10-2019 04:21 PM

I would want to give all privilege in configuration mode except one command : "no router eigrp" : How to write this ?

privilege exec level 15 no router

????

thx

Labels:
0 Helpful
4 Replies 4

Ivan Martinon
Level 7
Level 7

‎02-27-2009 06:37 PM

I think this would not be able to be accomplished like that, honestly your best shot is using command authorization, this as long as you have an ACS server and you have defined tacacs protocol, I did a quick test on dynagen trying to move the command router to level 14 and then moving the command "no router" to level 15 but that action moves the whole router command to level 15. just my 2 cents

0 Helpful

aneelaka
Level 1
Level 1

‎03-06-2009 02:41 PM

Best way to approach this is to use a TACACS server and command authorization, You can deny the router eigrp in the user or group level

0 Helpful

sahmedshahcsd
Level 1
Level 1

‎03-07-2009 02:29 AM

Using ACS server you can enable command authorization as denied for the command "router eigrp" on a group or user level basis.

HTH

Ahmed

0 Helpful

delahais
Level 1
Level 1
In response to sahmedshahcsd

‎03-11-2009 06:45 AM

Thx to everybody for your feedbacks

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents