Configuring CLI view?

[Andy White]

Hello,

I'm using Radius (via Windows 2008 NPS) and trying to authenticate a users with privilege 15 which is working and a custom privilege which I need to assign a custom CLI view to as these custom users only needs to be able to:

Show run

Sh ip int bri

sh vlan

shutdown

no shutdown

Is this possible or am I barking up the wrong tree?  I've look at the the CLI view document and it seems difficult to do, can anyone provide an example?

Thanks      

[John Blakley]

Have a look at this:

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtclivws.html#wp1027184

Views are easier to manage than privilege levels, but in the end it's still a lot of work getting them set up (at least I think they are).

Please rate useful posts..

[Andy White]

Thanks, what do most people do then as I'm sure this is a common request with companies having different levels of access for different teams?

IS it better to not use views, but just privileges?

[jonny7_2002]

I had a little play with this some time ago and you the views are the best way to go about it.

Jon

[John Blakley]

No...you'll appreciate views once you start using privilege levels. You should use views...