cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
355
Views
0
Helpful
1
Replies

ACE and Role Base Access List

Hi,

I would like to ask about possibility to deny access to command show running-config and show startup-config on ace module. I know how to assign user to role and domain, but the problem is that such users are able to run show running-config or show start-up config

if I did

Role limit-access

“rule 1 deny monitor”

“rule 2 permit monitor feature rserver “

The users are able to see all configs.

Thanks.

Rico Nego

1 Reply 1

Ganesh Hariharan
VIP Alumni
VIP Alumni

Hi Rico,

Check out the link below on ACE role based authorization hope that clears out your query !!

http://www.ciscosystems.ro/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_0/configuration/getting/started/guide/getstartgd.pdf

If helpful do rate the valuable post !!

Regards

Ganesh.H