yes.  Some of the ways to do it:

1.  Set a generic username/password with a privelege level of 1.  Set your
own username/password with a privelege level of 15.  Then set the command
that you want privelege level 1 to be able to use

2.  Set different enable passwords for different privelege levels.

3.  Don't give the other users the enable password, and they'll be
restricted to the simple show cammands (show interface, show ip route) and
they'll have no access to the running or saved configuration.

see (watch URL wrap-there are configuration examples at the bottom)
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur
_c/scprt5/scpass.htm
and
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur
_r/srprt5/srpass.htm

-e-
----- Original Message -----
From: "SH Wesson" 
To: 
Sent: Thursday, April 19, 2001 6:18 AM
Subject: telnet [7:1212]


> I want to allow this one network to be able to to telnet into my router,
but
> when then telnet into it I only want to give them access to the "show
> interface" command and nothing else.  However when I telnet into it from
my
> network I want to be able to access everything.
>
> What I've done is set the password on vty 0 4 and use the command login.
> However when they telnet to it and type the password to login then can
> access a lot of other commands including "show version", "show logging",
> "show standby", a lot of others even though they can't get into config t
> mode.
>
> Can anyone show me how to configure it to restrict the above telnet to
only
> a few commands.  Thanks.
>
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1237&t=1212
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to