Saeed42
ISP
- Jul 4, 2001
- 147
I created a group of users which can only enable and execute show run on all of our routers, but what I would like to do is the same group to have the ability to configure remote routers but not the core routers, and I'm having little problem implementing this.
group = lan_admin {
cmd = show {
# permit show commands
permit .*
}
cmd = enable {
# permit enable commands
permit .*
}
login = des xxxxxxxxxxxxxxxxx
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Don't be content with being average. Average is as close to the bottom as it is to the top
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
group = lan_admin {
cmd = show {
# permit show commands
permit .*
}
cmd = enable {
# permit enable commands
permit .*
}
login = des xxxxxxxxxxxxxxxxx
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Don't be content with being average. Average is as close to the bottom as it is to the top
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
