Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Problems with "privilege exec level" command on a ubr10k.

Hi,

we are configuring the following:

***********

privilege exec level 3 clear cable host

privilege exec level 3 clear cable modem

***********

We obtain this output.

***************

UBR10012#clear cable modem 1.2.3.4 reset

^

% Invalid input detected at '^' marker.

****************

Can some one give me some answer?

Thanks

3 REPLIES
Cisco Employee

Re: Problems with "privilege exec level" command on a ubr10k.

Are you logging in with a user with privilege level 3 here? For example, do you have something like:

aaa authentication login default group local

username helpdesk privilege 3 password

also, keep in mind that what you've done with your config is set ALL clear commands to level 3, not just the two you specify. This is a *feature* of the way IOS works, where by doing what you've done sets all clear commands to level 3. To move all the other clear commands back to level 15, do the following:

privilege exec level 3 clear cable host

privilege exec level 3 clear cable modem

privilege exec level 15 clear cable

privilege exec level 15 clear

Community Member

Re: Problems with "privilege exec level" command on a ubr10k.

Hello,

this is our configuration (is very basic),

enable secret level 3 5

enable secret 5

when someone that login on "ena 3" level try:

UBR10012#clear cable modem 1.2.3.4 reset

He obtain an error on the "reset". This is very problematic because we want that some basic user can "reset" cablemodems.

Thanks form your help

Juan

Cisco Employee

Re: Problems with "privilege exec level" command on a ubr10k.

OK, I tried this on a UBR and came up with some strange stuff. I added the same commands as you and sure enough, it would fail on the reset part of the command. If I added in the entire "clear cable ...." command (IP address and all) into the privilege command then it would work fine.

I tried similar commands on other types of routers and found that the privilege command has some problems with commands that have IP addresses as options in them.

Having found what I thought was a problem I went back to the UBR and re-added in the "priv exec level 3 clear cable modem" command, and it is now letting me do the command "clear cable modem 1.2.3.4 reset", where it wasn't before.

Now I can't get it to not work, and all I did was a "no priv exec level 3 clear" command and then typed it back in.

bb-uBR10k>en 3

Password:

bb-uBR10k#clear cable modem ?

A.B.C.D IP address of this modem

H.H.H 48-bit hardware address of the cable modem

bb-uBR10k#clear cable modem 1.2.3.4 ?

reset Remove cable modem from Station Maintenant List

bb-uBR10k#clear cable modem 1.2.3.4 reset

bb-uBR10k#sho priv

Current privilege level is 3

bb-uBR10k#en

Password:

bb-uBR10k#sho priv

Current privilege level is 15

bb-uBR10k#sho run | inc priv

privilege exec level 3 clear cable modem

bb-uBR10k#

360
Views
0
Helpful
3
Replies
CreatePlease to create content