Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PRIVILEGE COMMAND

I would want to give all privilege in configuration mode except one command : "no router eigrp" : How to write this ?

privilege exec level 15 no router

????

thx

4 REPLIES

Re: PRIVILEGE COMMAND

I think this would not be able to be accomplished like that, honestly your best shot is using command authorization, this as long as you have an ACS server and you have defined tacacs protocol, I did a quick test on dynagen trying to move the command router to level 14 and then moving the command "no router" to level 15 but that action moves the whole router command to level 15. just my 2 cents

New Member

Re: PRIVILEGE COMMAND

Best way to approach this is to use a TACACS server and command authorization, You can deny the router eigrp in the user or group level

New Member

Re: PRIVILEGE COMMAND

Using ACS server you can enable command authorization as denied for the command "router eigrp" on a group or user level basis.

HTH

Ahmed

New Member

Re: PRIVILEGE COMMAND

Thx to everybody for your feedbacks

145
Views
0
Helpful
4
Replies
CreatePlease to create content