02-25-2009 08:03 AM - edited 03-10-2019 04:21 PM
I would want to give all privilege in configuration mode except one command : "no router eigrp" : How to write this ?
privilege exec level 15 no router
????
thx
02-27-2009 06:37 PM
I think this would not be able to be accomplished like that, honestly your best shot is using command authorization, this as long as you have an ACS server and you have defined tacacs protocol, I did a quick test on dynagen trying to move the command router to level 14 and then moving the command "no router" to level 15 but that action moves the whole router command to level 15. just my 2 cents
03-06-2009 02:41 PM
Best way to approach this is to use a TACACS server and command authorization, You can deny the router eigrp in the user or group level
03-07-2009 02:29 AM
Using ACS server you can enable command authorization as denied for the command "router eigrp" on a group or user level basis.
HTH
Ahmed
03-11-2009 06:45 AM
Thx to everybody for your feedbacks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide