Disable ports by batch job

agis.lan21 · ‎05-06-2003

Our security policy wants to get unused ports to be disabled (admin status down). In case of duty these ports must be enabled.

Are there any tools, e.g. CM/CV to do this job by GUI, but like a batch job ?

milan.kulik · ‎05-06-2003

Hi,

you can do it by Cluster Manager Suite GUI (which can be also invoked from CiscoView by clicking on the device , preesing the second mouse buttom and choosing Configure).

But what do you exactly mean by "but like a batch job"?

Regards,

Milan

agis.lan21 · ‎05-07-2003

Enable/disable ports with batch job means: you have several ports in conference rooms, and you want them only to be enabled if there is a acknowledge user access. The rooms administration should be able to do this job like an office administration.

milan.kulik · ‎05-07-2003

Hi,

I'm afraid the only way is to define in the switch config (IOS):

username xxxxxx privilege 10 password ....

privilege interface level 10 shutdown

privilege configure level 10 int fa 0/1

..

privilege configure level 10 int fa 0/10

privilege exec level 10 configure terminal

The rooms administration can telnet to the switch and do shut/no shut on particular ports only.

You also might create some web pages for this which would start scripts doing some actions automatically.

But no other GUI access without knowing level 15 password. I remember there was read-only CMS access promised by Cisco but never seen it working.

Regards,

Milan