[c-nsp] Privilege levels and Secure ACS

Wojtek Zlobicki wojtek.zlobicki at gmail.com
Wed Jul 6 07:28:04 EDT 2005


I personally just dont trust that the last user on the box did a write
config.  In large networks, where many people may travel through a box
on a given day, show run is the only command I would trust.

On 7/5/05, Brett Looney <brett at looney.id.au> wrote:
> At 22:48 5/07/2005, you wrote:
> >Is 'show config' the same as 'show startup' ? The problem we have here
> >is that due to policy we don't always 'write mem' immediately, which
> >can obviously cause interesting troubleshooting problems when support
> >can't see the actual real config.
> 
> Yeah, and that will be the short coming with not having "show run".
> 
> >The other reason for wanting 'show run' specifically is that 'show run
> >int x' is just too useful to discard.
> 
> Absolutely. However, "show start | begin int x" is a reasonable
> alternative, with "/" getting you further occurrences. Not perfect
> admittedly but it is something. Doesn't get over your issue of not having
> the config written though...
> 
> B.
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 


-- 
----------------------------------------
wojtek.zlobicki at gmail.com



More information about the cisco-nsp mailing list