COMMAND BASED ASCCESS LIST

[Guest_imported]

dear all,
can we block any command say for example 'sh cofig'
so that user can reside in enabled mode howsoever can not able to see the configuration of router?

please help me out as soon as possible, thanks.


hiren

 

[awadood]

Hi ,

I suggest that instead of giving your user the enable mode password you can create a list of users and grant specific commands to them .

Good Luck .

 

[pmkincaid]

AAA Authentication is the route that you want to take. Do a search on cisco.com for "AAA Authentication" and you should find more than enough resources for setting up exactly what you are looking for.

Hope this helps,
Paul

 

[pmkincaid]

Sorry, one more thing -- AAA is the username/password combination that awadood was talking about...