[nsp] privilege levels and subinterface creation

Miquel van Smoorenburg miquels at cistron.net
Wed Oct 1 09:24:58 EDT 2003


If I create a user at "level 7", and I add the following commands:

!
username script privilege 7 secret 5 $1$KDVm$c.lwuVSwUSnheev6MhK9k/
!
privilege configure level 7 interface
privilege configure level 7 ip
privilege exec level 7 configure terminal
privilege exec level 7 configure

.. this user can change interface configurations. That is
what I want. But the user is only able to configure existing
(sub)interfaces, he/she cannot add subinterfaces.

I.e. when atm0/0/0.40 exists and atm0/0/0.41 doesn't:

nrp-6#conf te
Enter configuration commands, one per line.  End with CNTL/Z.
nrp(config)#interface atm 0/0/0.40
nrp(config-subif)#exit
nrp(config)#interface atm 0/0/0.41 point-to-point
                       ^
% Invalid input detected at '^' marker.

Anyone know of a way around this ?

Mike.


More information about the cisco-nsp mailing list