Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

Priv exec level not working

Hi,

I want a user to be able to view the running config but not make any changes - I read somewhere that the way to do this was as follows:

privilege exec level 3 show running-config

username auser priv 3 password xxxxx

This works in that I'm able to log on as auser, but when I try to view the running config, all I see is:

arouter#sh run

Building configuration...

Current configuration : 49 bytes

!

boot-start-marker

boot-end-marker

!

!

!

!

end

Any help would be much appreciated.

Thanks,

J

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Priv exec level not working

hey, "sh startup-config" gives a full view of the configuration. Sh run doesnt work here.

12 REPLIES
Hall of Fame Super Gold

Re: Priv exec level not working

J

I think that it is not possible to do what you are trying to do. One of the principles of IOS is that you can not see things in running config that you can not change. I believe that it reflects a security concern that if you can not change it in the config you should not see it in the config.

HTH

Rick

New Member

Re: Priv exec level not working

Thanks very much for your response Rick. So what is the best thing to do if you have a user that basically needs read only rights?

J

Hall of Fame Super Gold

Re: Priv exec level not working

J

You might try show startup instead of show run. Give it a try and let us know what happens.

HTH

Rick

Re: Priv exec level not working

try the command:

sh running-config view full

let us know if it helps

New Member

Re: Priv exec level not working

Sorry, it didn't help, but thank you for your reply.

Re: Priv exec level not working

can you provide the configs.

also ios ver

Re: Priv exec level not working

hey, "sh startup-config" gives a full view of the configuration. Sh run doesnt work here.

Re: Priv exec level not working

well i guess i used some diffent command in which you can see the full config.

the below command show the full config

privilege exec all level 3 show running-config

that is only if you type

show running-config view full.

On the other hand all show commands are enabled..

there should be a way..... but need to work on this

New Member

Re: Priv exec level not working

Thanks all for your input - much appreciated.

New Member

Re: Priv exec level not working

This worked, thank you - that will be fine for the user's needs.

Re: Priv exec level not working

so u using show startup confiig output ?

New Member

Re: Priv exec level not working

I'm using:

priv exec level 3 show startup-config

175
Views
0
Helpful
12
Replies
CreatePlease to create content