Cisco Privilege Level

[Nazgulero]

Hello,

I wonder if there is a way to EXCLUDE certain commands from a privilege level. Let's say I want a user to have access to all exec commands, except for the command used to configure level 5 passwords. I know that I can create a privilege level specifying which commands a specific user can use, but that would mean that I need to include all commands except the one(s) I do not want the user to have access to.
I'd appreciate any ideas, thanks for your help in advance.

Regards,

Naz

 

[buraglio]

Cisco privs are often unused to their fullest capability. I believe this is doable, check out

http://www.cisco.com/univercd/cc/td.../ios122/122cgcr/fsecur_c/fothersf/scfpass.htm

It's a decent reference to all the privileges.

----------------------------------------
Nicholas D. Buraglio

http://www.buraglio.com/nick/gpg-pub-key.txt