Hello Matt,

So I finally figured out my issue. For some reason when I logged in using
the Oper account I wasn't being put in the Oper view mode. When I did a show
parser view I was getting no view active.

So I started reading and was getting ready to send my entire config when I
decided to check the options for the user account and view is one of them.
So this is how my user account now looks:

username Oper view Oper password cisco

And my parser Oper view is working perfectly. Even though there are those
extra commands I only have what I configured under the Oper view.

Thank you for your input, it was a big help in tracking down my
configuration issue.

James

-----Original Message-----
From: Matt Hill [mailto:[email protected]] 
Sent: Sunday, November 11, 2012 5:16 PM
To: James K Keddington II
Cc: [email protected]
Subject: Re: [OSL | CCIE_Security] Parser view and Banner questions

Hi James,

A few things.

Are you in "view" mode when you enter the config?  You need to "enable view"
from exec to be able to enter it.  Privilege exec mode will not work, as
view is a new third type of exec mode.

Also, do you have a aaa group defined?  Both for authentication and
authorisation?  You must have the user in question authenticated via aaa for
parser view to work.  A default group is fine, as is a local group.  You do
not require a aaa server.  Finally, dont forget to apply the groups to your
vty/console (assuming you want to enable view on the console too).  ie login
authentication <<group>>, authroization exec <<group>>

One other thing to think about (although this is separate to your
query) is you can use operators such as "all" when configuring the parser
commands (ie commands exec include all show) which will allow "show" and
everything underneath "show".

HTH

Cheers,
Matt

CCIE #22386
CCSI #31207

On 12 November 2012 09:54, James K Keddington II <[email protected]>
wrote:
> Hello -
>
>
>
> I have been working on the IPexpert Lab 12 and I have some questions. 
> For Task 6.2 I am being asked to create a banner to show a greeting 
> message after the user logs in. So I created an "exec" banner:
>
>
>
> Banner exec %
>
> Greeting Message
>
> %
>
>
>
> But the Solution guide shows a MOTD banner which is displayed right 
> before the user logs in. In real lab what would be the right solution?
>
>
>
> The other part of the question deals with granting one user full admin 
> rights and a second user the ability to run two commands. I am good 
> with the first option of creating a menu but I am experiencing issues 
> when I do the "Parser View" in that when I exit the parser view some 
> commands are added automagically and I am also unable to see or execute
the "clear arp-cache"
> command when logged in as the Oper user.
>
>
>
> This is what my parser view Oper config looks like:
>
>
>
> username Admin privilege 15 password 0 cisco
>
> username Oper password 0 cisco
>
>
>
> parser view Oper
>
> secret 5 $1$dSfh$rt1/zMbME4C9.GDYdY9Hr1
>
> commands exec include show ip arp
>
> commands exec include show ip (added by default)
>
> commands exec include show (added by default)
>
> commands exec include clear arp-cache
>
> commands exec include clear (added by default)
>
>
>
> What am I doing wrong?
>
>
>
> Thank you,
>
> James
>
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, 
> please visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out 
> www.PlatinumPlacement.com
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2013.0.2793 / Virus Database: 2624/5889 - Release Date: 11/11/12

_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to