questions about privlidge mode and local users

D0nprintup_2 · ‎08-28-2009

I am trying to setup a username with a lower level access so they cannot access a config t.

I am having a hard time finding any documentation on what each level does. I only want the user to view a show run. Now i know i could setup a privilage command and then enter in each and eveery command for a show run and set it to lets say level 3 or something.

I dont want to go through all that, i just want to set it to the level where they can view the entire output of a show run.

Mohamed Sobair · ‎08-28-2009

Hi Donald,

you will need to set first the privlidge for the users , and then assign them the appropriate command.

here what you can do:

1- username xxxx privilidge 2 password yyyy

2- in the config mode;

privlidge level 2 exec (sh run)

like wise, if you need to assign them command in the config mode you will have to type config after the level or if its in the interface you will have to type the interface.

HTH

Mohamed

D0nprintup_2 · ‎08-28-2009

thank you, i realized that. But if i did a level 2 and then set sh run. When they did it, they would not see the entire config. I would also have to set a show ip, sh iterface , sh router ......

so they can see everything in a show run. Isnt there a level i can set that includes all of them?

Edison Ortiz · ‎08-28-2009

Please refer to this technote:

http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800949d5.shtml

HTH,

__

Edison.