Create a Read-Only login on my cisco routers

Alan_152 — Fri, 11 Jul 2008 20:24:42 GMT

I need assistance setting up a couple of my Cisco routers with read-only accounts so that certain users can "show run" and read various logs without being able to change any of the configuration.

The main mode of access to the router will be through the console port, which is already configured with a read-write password.

Re: Create a Read-Only login on my cisco routers

Pieter 't Hart — Mon, 14 Jul 2008 12:38:26 GMT

in document :
http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800949d5.shtml#priv
cisco reports,
"To enable a privileged user to view the entire configuration in memory, the user needs to modify privileges for all commands that are configured on the router."

So if you are not enabled for all commands (level-15) you cannot see the full configuration!

A suggested solution could be the autocommand option:
username inout password inout
username inout privilege 15 autocommand show running

topic Re: Create a Read-Only login on my cisco routers in Switches, Hubs, and Modems

Create a Read-Only login on my cisco routers

Re: Create a Read-Only login on my cisco routers