Privileged GUI access in 3560 Switch

hclisschennai · ‎03-26-2009

Hi All,

I am installing Cisco 3560 Switch. I have enabled HTTP access to the switch using "ip http server". I am able to open the switch in GUI Mode also using the Username and Password

It is opening in Privilege Level 15. Thus i am able to change / configure the switch setting if i login to switch using this username and password.

But I want to have different userlevel privilege to login to the switch. For example username staff should view only the port parameter details and not allowed to configure/Change the switch speed setting.

Another privileged user admin should be allowed to do all the activity like monitoring / configure the switch

Hope this information is enough to guide me

Thanks in advance,

R.B.Kumar

andrew.butterworth · ‎03-26-2009

Not currently possible as HTTP access requires Level 15 privileges and this can't be changed. You could use Cisco ACS & TACACS+ and enable command authorization and then assign users to different groups which have certain commands enabled or disabled. I think that is your only option.

Andy