Tacacs on 3560's and 6500's 1

[BCSCB]

Hi,

We have multiple switches across the network running Tacacs

We have people in that need to view configurations of our switches and routers. They need to be able to use the command's
sh run
sh conf

This has been requested,. What we dont want to do is allow them to change anything.

If we provide a Read only password it doesnt allow you to view the Running config

Can we grant them an enable password that only allows them to use sh command ??

Can this be done and how

Thanks

 

[vipergg]

I know it can be done but it is done in the tacacs server itself , just not sure how . I know you can specify specific commands for certain userids because we had to do the same thing on our network , most of that was done by the tacacs server people though , nothing to be done on the router and switches .

 

[BuckWeet]

Research command sets and priviledge level configurations..


BuckWeet

 

[BCSCB]

Cheers Guys,

It was done on the Server itself. Thanks for the Hint Buckweet, I found a handy " How Too" using priviledge level configurations.

If your interested its here

http://www.netcraftsmen.net/welcher/papers/aaabasics02.html#Controlling_User_Privilege_Levels

Thanks again

BC