Hey there,

I log in to my cisco devices with SSH keys, but I don't think that matters for the purposes of this.

I'd like to create a "rancid" user for my (cisco, primarily IOS classic) devices which has full privileges to do things like "show run", but that has no ability to change the configs.

I know this is possible to do as part of Tacplus, but as I only have three or four devices, spinning up tacplus seems more complicated than need be. (This is why I mentioned ssh, just in case -- all my users have local privilege levels in the config).

I'm sure this has been asked before, but my google-fu is failing me here.

Bonus points if you know this for things like IOS-XR/XE or Junos.

--

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
FB:  fb.com/DanielMahoneyIV
LI:   linkedin.com/in/gushi
Site:  http://www.gushi.org
---------------------------

_______________________________________________
Rancid-discuss mailing list
[email protected]
http://www.shrubbery.net/mailman/listinfo/rancid-discuss

Reply via email to