Hello all,
This is related to the thread557-1568656 which was post by bizzaro. unfortunately I was not able to rely to that thread. I want to deny some commands for the group SUPER_USER and through below would work. It works fine for other commands except "router" command. The aim is that I don't want SUPER_USER to execute a command like "MYROUTER(config)#router bgp 23428"
group = SUPER_USER {
default service = permit
cmd = debug {
deny .*
}
cmd = router {
deny .*
}
cmd = reload {
deny .*
}
cmd = clear {
deny .*
}
service = exec {
priv-lvl = 15
}
}
Best regards,
Takdy
This is related to the thread557-1568656 which was post by bizzaro. unfortunately I was not able to rely to that thread. I want to deny some commands for the group SUPER_USER and through below would work. It works fine for other commands except "router" command. The aim is that I don't want SUPER_USER to execute a command like "MYROUTER(config)#router bgp 23428"
group = SUPER_USER {
default service = permit
cmd = debug {
deny .*
}
cmd = router {
deny .*
}
cmd = reload {
deny .*
}
cmd = clear {
deny .*
}
service = exec {
priv-lvl = 15
}
}
Best regards,
Takdy