[c-nsp] Privilege levels and Secure ACS
Wojtek Zlobicki
wojtek.zlobicki at gmail.com
Wed Jul 6 07:28:04 EDT 2005
I personally just dont trust that the last user on the box did a write
config. In large networks, where many people may travel through a box
on a given day, show run is the only command I would trust.
On 7/5/05, Brett Looney <brett at looney.id.au> wrote:
> At 22:48 5/07/2005, you wrote:
> >Is 'show config' the same as 'show startup' ? The problem we have here
> >is that due to policy we don't always 'write mem' immediately, which
> >can obviously cause interesting troubleshooting problems when support
> >can't see the actual real config.
>
> Yeah, and that will be the short coming with not having "show run".
>
> >The other reason for wanting 'show run' specifically is that 'show run
> >int x' is just too useful to discard.
>
> Absolutely. However, "show start | begin int x" is a reasonable
> alternative, with "/" getting you further occurrences. Not perfect
> admittedly but it is something. Doesn't get over your issue of not having
> the config written though...
>
> B.
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
--
----------------------------------------
wojtek.zlobicki at gmail.com
More information about the cisco-nsp
mailing list