I was reading this pdf called "1001 things to do with a Cisco Router" and I came across this topic. I have done it before while doing the ISCW but here it is again.
FIRST, ENABLE AAA:
R4#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R4(config)#aaa new-model
SET ENABLE PASSWORD:
R4(config)#enable secret cisco
R4(config)#^Z
SWITCH TO VIEW MODE:
R4#en view
Password:
R4#
*Mar 2 23:03:20.352: %PARSER-6-VIEW_SWITCH: successfully set to view 'root'.
R4#
NOW WE CAN CREATE THE VIEW:
R4(config)#parser view operator
R4(config-view)#?
View commands:
commands Configure commands for a view
default Set a command to its defaults
exit Exit from view configuration mode
no Negate a command or set its defaults
secret Set a secret for the current view
R4(config-view)#commands exec include ping
% Password not set for the view operator
R4(config-view)#secret operator
R4(config-view)#commands exec include ping
R4(config-view)#commands exec include show hardware
R4(config-view)#commands exec include show interface
R4(config-view)#commands exec include show ver
R4(config-view)#exit
LOG IN TO THE VIEW:
R4#en view operator
Password:
*Mar 2 23:05:41.212: %PARSER-6-VIEW_SWITCH: successfully set to view 'operator'.
R4#show ?
flash: display information about flash: file system
hardware Hardware specific information
interfaces Interface status and configuration
parser Display parser information
slot0: display information about slot0: file system
slot1: display information about slot1: file system
version System hardware and software status
ALSO, YOU CAN ADD THE VIEW TO THE USER:
R4(config)#username operator view operator password operator
Wednesday, December 17, 2008
Subscribe to:
Post Comments (Atom)
Good Post. I always thought this was an interesting way to do it.
ReplyDeleteHow do you change the views again I get this..
ReplyDeletebizarre...
Rack1R5#enable view
Rack1R5#
*Mar 8 00:28:55.854: %AAA-6-USER_BLOCKED: Enable view requires to be authenticated by non-none methods,Please use the appropriate method with the login authentication
Rack1R5#
http://ieoc.com/forums/t/10262.aspx
how to adjust "No view Active! Switch to View Context"? thanks
ReplyDeleteI tried to configure parser views in conjunction with RADIUS authentication, but I didn't get this working. I even noticed that I wasn't able to change parser view configuration settings, when I logged in with RADIUS credential.
ReplyDeleteI had to change the aaa authentication login and aaa authorization exec settings to local, before being able to change parser view settings.
1. Hi, how i can put user in specific view after login
ReplyDelete2. i want user run only show int f0/0, but it is showing all show int commands.