I want a user to be able to view the running config but not make any changes - I read somewhere that the way to do this was as follows:
privilege exec level 3 show running-config
username auser priv 3 password xxxxx
This works in that I'm able to log on as auser, but when I try to view the running config, all I see is:
Current configuration : 49 bytes
Any help would be much appreciated.
Solved! Go to Solution.
I think that it is not possible to do what you are trying to do. One of the principles of IOS is that you can not see things in running config that you can not change. I believe that it reflects a security concern that if you can not change it in the config you should not see it in the config.
Thanks very much for your response Rick. So what is the best thing to do if you have a user that basically needs read only rights?
well i guess i used some diffent command in which you can see the full config.
the below command show the full config
privilege exec all level 3 show running-config
that is only if you type
show running-config view full.
On the other hand all show commands are enabled..
there should be a way..... but need to work on this