Prevent "no" Under a Particular Interface

I want to figure out how I can use EEM to prevent all users from running a "no" command on a particular interface.
Normally I would right something like:
event manager applet PREVENT-POLICY-MAP-REMOVAL
event cli pattern "no *" sync no skip yes
action 1.0 syslog msg "DO NOT REMOVE A SERVICE POLICIES FROM THIS PORT"
However, this would prevent the command under all configuration modes.  I just want the EEM script to protect a single ethernet port.  Without using AAA authorization (local privileges) or TACACS authorization, how could I do this?

Try this applet to block "no commands" under the interface.
event manager applet cmd
 event cli pattern "no *" mode "interface" enter
 action 1.0 syslog msg "NO Commands not allowed under interface mode"
 action 2.0 set _exit_status "0"

Similar Messages

  • Prevent logging for a particular interface ?

    Hi Guys,
    In our xi landscape we have one interface with the credit card data and it is synchronus and we have other interfaces also which are synchronus. Is it possible to prevent the logging for particular interface ?
    any help would be really appreciated
    Thanks,
    Srini

    Hi,
    As per SP13 Release Document it is possible to restrict access of certain users, for this go thru this link
    http://help.sap.com/saphelp_nw04/helpdata/en/ff/42ad423442c611e10000000a1550b0/content.htm
    Reward points if helpful******
    Thanks,
    Madhu

  • How do i get a list of all Roles defubed under a particular OrganizationalUnit? How can i use LDAPConnection.search method for this?

     

    Sorry for the typographical mistake.
    Please read the question as:"How do i get a list of all Roles defined under a particular OrganizationalUnit? How can i use LDAPConnection.search method for this?"

  • How to prevent JaxB creation of 2 Interfaces for each Element?

    hi,
    does any body know how to prevent JaxB creation of 2 Interfaces for each Element (The Content Interface and the element interface)?
    I want to configure JaxB to use only one Interface and only one implementation Class.
    Thank's,

    I am sorry I can not answer your question, I have got the same problem. Could you please email me to
    [email protected] when you know the answer, please.
    I have a question for you. When and complex type is validated, I get the object which contains the error. ( or objects ).
    However. How do know the position in the actual parent object. basically. Is there a way to know exactly the position of that attribute in that object. I need to store errors strings.
    The first problem derives from this one:
    It is not possible to execute validate function for a primitive attribute inside an structure.
    I would appreciate your help.
    Thanks.
    Gustavo.

  • How do i prevent display of a particular column in ALV

    How do i prevent display of a particular column
    of a structure in ALV

    Hi Serdar,
    Please do let us know the link , as soon as your code sample is put in sdn.sap.com.
    I request the <b>veteran members</b> of this forum to <b>contribute to WebLogs</b> or <b>code samples</b>, since over the time, the same questions will be asked and instead of repeating the answers, we can direct them to Weblogs or Code Samples.
    There is an ABAP FAQ present in this site, which has given insight to so many things, that I have not even considered remotely possible.
    As seen today, there was a useful piece of code posted. Instead of posting the code in the forum, you can create it as a weblog and post it there.
    Regards,
    Subramanian V.

  • Which HR table has details of subordinates names under a particular person?

    Which HR table has details of subordinates names who are under a particular person?
    That is>>I need to know 'I have to display all the employes working under a particular person' how can I do it??
    Regards,
    Shashank.

    Look at infotype 1001, where objects are linked
    <b>About the Relationship Infotype (1001)</b>
    <b>Definition</b>
    Infotype, which defines the Relationships between different objects.
    <b>Use</b>
    You indicate that a employee or user holds a position by creating a relationship infotype record between the position and the employee or user. Relationships between various organizational units form the organizational structure in your enterprise. You identify the tasks that the holder of a position must perform by creating relationship infotype records between individual tasks and a position.
    Creating and editing relationship infotype records is an essential part of setting up information in the Organizational Management component. Without relationships, all you have are isolated pieces of information.
    Look also at <a href="http://help.sap.com/printdocu/core/Print46c/en/data/pdf/HRINF/HRINF.pdf">HR Infotypes</a> for a detailed list of infotypes.
    Regards

  • To list all the employees under a particular supervisor

    Hi
    Can any1 plz tell me which table contains the information abt the employees under a particular supervisor?i need to list down all the employees under a particular supervisor.. only the immediate employees not the whole hierarchy.. just one level down.
    thanks
    SS
    Message was edited by:
    SS

    The PER_ALL_ASSIGNMENTS_F table has each employee/contractor assignment, including the history. The SUPERVISOR_ID is the person id of the supervisor and the PERSON_ID is the person id of the employee/contractor.

  • Employees coming under a particular Manager

    Hi,
    I want to know all the employees who come under a particular lead. I am developing a report for leads to see what went wrong during time evaluation for employees in his group. I need to restrict the output to display only the employees who come under him.
    How can I restrict this? How would I know who all belong to his group?
    Thanks
    Vamsi

    You can use the function call HRWPC_PNP_MANAGED_EMPLOYEES in your Report.
    ~Suresh

  • Confgiure router to use particular interface IP add.for TACACS+ authenticat

    How to confgiure router to use particular interface's IP address for all comunications with ACS server for TACACS+ authentication.
    Thanks a lot...

    Use the command:
    ip tacacs source-interface

  • Cancelling messages for particular interface

    Can we cancell message for particular condition. Example I want to cancell message for that particular interface. Do we have to run some report for this. Please specify the name for the report which I have to run???
    Shriram

    Yes you have to run one report
    RSXMB_CANCEL_MESSAGES
    There is one blog on this
    /people/gourav.khare2/blog/2007/12/21/mass-cancellation-of-error-messages--xi
    Is this what you are looking for.
    Can you please explain the same in detail
    Thanks
    Do reward points if helpful

  • Create User under a particular organization

    Hi,
    After running reconciliation i need to create the UNMATCHED users in IDM under a particular organization.
    I have configured the reconciliation policy to create the user in IDM.
    By default it is creating the user under Top organization. But i need to create it under a particular
    organizantion without using a custom post reconciliation workflow.
    Can anyone of you experts suggest?
    Edited by: jjIDM on Feb 4, 2009 11:15 PM

    Hi,
    You have to set proxy administrator in Reconcillation Policy and assign a form to that proxy admin.
    u have to write this code in that form which you have assigned to proxy admin.
    <Field name='waveset.backgroundSave'>
    <Display class='Hidden'/>
    </Field>
    <Field name='waveset.organization'>          
         <Expansion>
         <block trace='true' name='kkkkkkkkkk'>
         <s>Organization Name</s>
         </block>
         </Expansion>
    </Field>
    Then run your reconcillation Process from the Proxy Admin.
    Edited by: negiqueries on Feb 5, 2009 7:49 AM

  • Binding HttpUrlConnection to a particular interface

    I have specific a requirement where I have to bind an HttpUrlConnection to a particular interface, e.g. over the Wireless rather than the land line. I can do that with a socket connection but would like the added features of an HttpUrlConnection. Does anyone know of this capability in the java network API?

    Hi,
    I've got exactly the same problem. Did you ever get an answer for this? I'm thinking of using another ORB, but would prefer to stick with SUN and orbd.

  • No dialer command under ISDN BRI interface

    Hi all,
    I have a 2901 router voice bundle with 4 ISDN BRI ports and would like to have them bundled under Dialer1 interface. Unfortunately it doesn't give me option for Dialer command under BRI interface as expected. 
    router(config-if)#int bri0/0/0
    router(config-if)#dia
    router(config-if)#dia
                             ^
    % Invalid input detected at '^' marker.
    router(config-if)#dialer
                             ^
    % Invalid input detected at '^' marker.
    router(config-if)#
    I assume it's down to the UC license installed on the device but not sure. Does the ISDN BRI interface behave in different way under this license?
    Pasting portion of "show ver" as well.
    Cisco CISCO2901/K9 (revision 1.0) with 479232K/45056K bytes of memory.
    Processor board ID 
    2 Gigabit Ethernet interfaces
    4 ISDN Basic Rate interfaces
    1 terminal line
    DRAM configuration is 64 bits wide with parity enabled.
    255K bytes of non-volatile configuration memory.
    250880K bytes of ATA System CompactFlash 0 (Read/Write)
    License Info:
    License UDI:
    Device#   PID                   SN
    *0        CISCO2901/K9          
    Technology Package License Information for Module:'c2900'
    Technology    Technology-package           Technology-package
                  Current       Type           Next reboot
    ipbase        ipbasek9      Permanent      ipbasek9
    security      None          None           None
    uc            uck9          Permanent      uck9
    data          None          None           None
    Configuration register is 0x2102

    Hi,
              Snippet of "sh ver" with IOS version is below:
    router#show ver
    Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.2(4)M5, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2013 by Cisco Systems, Inc.
    Compiled Fri 13-Sep-13 14:59 by prod_rel_team
    ROM: System Bootstrap, Version 15.0(1r)M16, RELEASE SOFTWARE (fc1)
    router uptime is 2 days, 21 hours, 47 minutes
    System returned to ROM by reload at 16:48:03 UTC Mon Aug 18 2014
    System restarted at 16:50:01 UTC Mon Aug 18 2014
    System image file is "flash0:c2900-universalk9-mz.SPA.152-4.M5.bin"
    Last reload type: Normal Reload
    Last reload reason: Reload Command
    The output of trying to type dialer command is in the initial post, I'm also pasting all available commands under bri0/0/0.
    router(config-if)#int bri0/0/0
    router(config-if)#?
    Interface configuration commands:
      aaa                     Authentication, Authorization and Accounting.
      access-expression       Build a bridge boolean access expression
      arp                     Set arp type (arpa, probe, snap), timeout, log
                              options or packet priority
      authentication          Auth Manager Interface Configuration Commands
      autodetect              Autodetect Encapsulations on Serial interface
      bandwidth               Set bandwidth informational parameter
      bgp-policy              Apply policy propagated by bgp community string
      bridge-group            Transparent bridging interface parameters
      carrier-delay           Specify delay for interface transitions
      cdp                     CDP interface subcommands
      clns                    CLNS interface subcommands
      clock                   Configure serial interface clock
      cwmp                    Configure CPE WAN Management Protocol(CWMP) on this
                              interface
      dampening               Enable event dampening
      default                 Set a command to its defaults
      delay                   Specify interface throughput delay
      description             Interface specific description
      dot1q                   dot1q interface configuration commands
      dot1x                   Interface Config Commands for IEEE 802.1X
      down-when-looped        Force looped serial interface down
      encapsulation           Set encapsulation type for an interface
      ethernet                Ethernet interface parameters
      exit                    Exit from interface configuration mode
      flow-sampler            Attach flow sampler to the interface
      full-duplex             Configure full-duplex operational mode
      h323-gateway            Configure H323 Gateway
      half-duplex             Configure half-duplex and related commands
      help                    Description of the interactive help system
      history                 Interface history histograms - 60 second, 60 minute
                              and 72 hour
      hold-queue              Set hold queue depth
      ip                      Interface Internet Protocol config commands
      iphc-profile            Configure IPHC profile
      ipv6                    IPv6 interface subcommands
      isdn                    ISDN Interface configuration commands
      isis                    IS-IS commands
      iso-igrp                ISO-IGRP interface subcommands
      keepalive               Enable keepalive
      line-power              Provide power on the line.
      llc2                    LLC2 Interface Subcommands
      load-interval           Specify interval for load calculation for an
                              interface
      logging                 Configure logging for interface
      loopback                Configure internal loopback on an interface
      mab                     MAC Authentication Bypass Interface Config Commands
      mac-address             Manually set interface MAC address
      macro                   Command macro
      metadata                Metadata Application
      mop                     DEC MOP server commands
      mtu                     Set the interface Maximum Transmission Unit (MTU)
      netbios                 Use a defined NETBIOS access list or enable
                              name-caching
      network-clock-priority  Configure clock source priority
      no                      Negate a command or set its defaults
      ntp                     Configure NTP
      ospfv3                  OSPFv3 interface commands
      pulse-time              Force DTR low during resets
      rate-limit              Rate Limit
      redundancy              RG redundancy interface config
      routing                 Per-interface routing configuration
      sdllc                   Configure SDLC to LLC2 translation
      serial                  serial interface commands
      service-policy          Configure CPL Service Policy
      shutdown                Shutdown the selected interface
      smds                    Modify SMDS parameters
      snapshot                Configure snapshot support on the interface
      snmp                    Modify SNMP interface parameters
      source                  Get config from another source
      tarp                    TARP interface subcommands
      timeout                 Define timeout values for this interface
      topology                Configure routing topology on the interface
      transmit-interface      Assign a transmit interface to a receive-only
                              interface
      trunk-group             Configure interface to be in a trunk group
      tx-ring-limit           Configure PA level transmit ring limit
      vpdn                    Virtual Private Dialup Network
      vrf                     VPN Routing/Forwarding parameters on the interface
      waas                    WAN Optimization
    router(config-if)#

  • ACE: Read users under a particular User Group

    Hi Experts,
                        We have a requirement, in which we want a particular view to be displayed only to few particular users, who are present in some Custom Defined ACE User Groups.
      Can someone please provide me with the Function modules/ Coding part, by which i can get all the users of a particular User Group of ACE (say 'ZCRMADMIN' in our case), that we define in SPRO->Basic Functions -> ACE.
    Thanks in advance,
    Rohit

    Hello, Rohit!
    First of all read these blogs:
    The concept and implementation of CRM-ACE
    Configuration & Implementation of CRM Access Control Engine (ACE)-Part 1
    Then in this blog there are code samples:
    Configuration & Implementation of CRM Access Control Engine (ACE)-Part 2
    If you will steel have any questions, post it here, I'll try to help you.
    Best regards,
    Artur Litvinov.

  • Configuring Alert for Particular Interface

    Hi All,
    There are lots of post with regards to Alerts using RZ20 and ALRTCATDEF. However it would be of great help if I can get a blog link or sdn thread which can help me create Alerts and send to email in the below format.
    Subject: Of my choice
    From: System
    To: My email or group email
    Alert ID: ##ID number##
    FROM :
    interface:                <Sender Interface Name>
    service:                  <Sender BS>
    namespace:         <SenderNamespace>
    TO :
    service:                 <Receiver BS>
    namespace:        <Receiver Namespace>
    interface :             <Receiver Interface Name>
    Also if some channel is in error or NWA locks are formed for more than a specified time can we create Alert for them?
    Apologies if this turns out to be a duplicate post. Please post the proper thread in that case.
    Regards,
    Shaibayan

    Hi Chakrabarti,
    To set up alert below link if enough.
    Alert Configuration – Step by Step Guide
    You can perform various test cases and setup alerts as per your requirements.
    To trouble shoot on alerts below thread list all important notes.
    Mail not getting triggerred from Alerts in PI 7.1
    Hope this helps you.
    Regards
    Jitender

Maybe you are looking for