Read only access for Cisco Routers

[dhilipsraj]

Hi,

I need a provide a read only access for a account in my cisco router. If I create a local account with priv 5, then when he does a "sh run" will he get all the details or details which are at priv 5 only???

[cadet alain]

Hi,

He will only see the output related to the commands enabled in his privilege level not all show run.

Regards

Alain

Don't forget to rate helpful posts.

[mwandu]

Hi Cadet Alain,

Thank you for the response.

As follow up question, is there is a command that will be able to show which commands are  allowed to a specific privilege level?

Thank you.

[cadet alain]

Hi,

if you have privilege level 15 and if the privileges were locally defined then sh run | i privilege will tell you.

if the privileges are configured on a TACACS server then there's no show command on the device but if a command is not enabled then when logged in with this privilege level the question mark will tell you what you can do.

Regards

Alain

Don't forget to rate helpful posts.