Show commands logging ?

Hi guys, i m using ACS 3.3 windows version, these are the commands
aaa accounting update periodic 1
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
but i m not getting all the show commands logged, i usually get logging of show running, show start-up, but no other show commands like show ip int brief and such, what is the reason ? how can i get all the exec commands logged ?
thanks

Ovais
The command that you have configured:
aaa accounting commands 15 default start-stop group tacacs+
will generate accounting records for the commands that are entered that require level 15 privilege (such as show run, show start, etc) but will not generate accounting records for commands which only require level 1 privilege (such as sh ip int brief, etc). If you also want these commands to generate accounting records then you should add this to your config:
aaa accounting commands 1 default start-stop group tacacs+
HTH
Rick

Similar Messages

It shows the log sequence not found error while all the log seqences exist?

Why the database shows the log sequence not found error while all the log seqences exist?
SQL> select*from v$log_history;
RECID STAMP THREAD# SEQUENCE# FIRST_CHANGE# FIRST_TIM NEXT_CHANGE#
RESETLOGS_CHANGE# RESETLOGS
1 657328345 1 1 519368 13-JUN-08 543434
519368 13-JUN-08
2 657370849 1 2 543434 13-JUN-08 567705
519368 13-JUN-08
3 657373012 1 3 567705 14-JUN-08 570408
519368 13-JUN-08
RECID STAMP THREAD# SEQUENCE# FIRST_CHANGE# FIRST_TIM NEXT_CHANGE#
RESETLOGS_CHANGE# RESETLOGS
4 657373039 1 4 570408 14-JUN-08 570464
519368 13-JUN-08
5 657374623 1 5 570464 14-JUN-08 573505
519368 13-JUN-08
6 657375015 1 6 573505 14-JUN-08 573856
519368 13-JUN-08
RECID STAMP THREAD# SEQUENCE# FIRST_CHANGE# FIRST_TIM NEXT_CHANGE#
RESETLOGS_CHANGE# RESETLOGS
7 657376537 1 1 570465 14-JUN-08 573543
570465 14-JUN-08
8 657377084 1 2 573543 14-JUN-08 575109
570465 14-JUN-08
9 657377094 1 3 575109 14-JUN-08 575114
570465 14-JUN-08
RECID STAMP THREAD# SEQUENCE# FIRST_CHANGE# FIRST_TIM NEXT_CHANGE#
RESETLOGS_CHANGE# RESETLOGS
10 657377103 1 4 575114 14-JUN-08 575121
570465 14-JUN-08
11 657377106 1 5 575121 14-JUN-08 575123
570465 14-JUN-08
11 rows selected.
RMAN> flashback database to sequence=10 thread=1;
Starting flashback at 14-JUN-08
using target database control file instead of recovery catalog
allocated channel: ORA_DISK_1
channel ORA_DISK_1: sid=155 devtype=DISK
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of flashback command at 06/14/2008 13:03:15
RMAN-20206: log sequence not found in the repository

Apart from the output being hardly readable (please refer to the FAQ in the right upper hand corner how to post output), I don't see any sequence 10.
You seem to mistake the column recid for the sequence column.
The sequences are listed in -not surprisingly- the sequence# column.
Sybrand Bakker
Senior Oracle DBA

ACE - unable to execute various show commands. Error: Called API timed out

Hi I am runnng version A2(2.3) on a HA ACE setup.
I have noticed today that issuing various show commands such as 'show run' and 'show probe' on the active ACE have suddenly stopped working. On hitting return the ACE sits there for a while non respondant before finally outputting an Error: Called API timed out and then returning to the command prompt. It only seems to happen on show commands that would generate a lot of output, for example a 'show version' works. I have also noticed a delay sometimes in logging into the active ACE which has again only come to light today.
We havent made any changes recently and this behavior has not been seen before.
I could only find one similar posting which kind of suggested that a high logging level may be to blame for this issue, we are running at debugging level but have since the ACE's were brought into play over 12 months ago (yep i know logging at that level is far from ideal).
Production traffic does not seem to be affected at present.
Apart from reudcing the logging level I am not sure what else could be causing this issue, has anyone come across this one before?
Unfortunaltey the 'show resource usgae in one of the commands that wont work'
A 'show cpu' command shows nothing above 10%
Though multiple context are configured (3), the default resource allocation is in place between all three.
Thanks for taking the time to read.

Thanks for the response I will take a look at that Bug ID.
In the end as you have already suggested above I ended up failing across to the standby ACE and powering down/up the affected ACE module from the switch CLI. This seems to have restored all functionality. Even a soft reload command prior on the affected ACE didnt take affect.

Show Command Killed 6509???

Good Morning,
Can anyone tell me why issuing the following command would drive the processor utilization 100%?
sh ip device tracking all
This effectively took the switch offline until we resolved the issue by clearing the vty lines. The following message was listed in the log 4 times:
%IP_DEVICE_TRACKING-4-TABLE_LOCK_FAILED: Table already locked byprocess-id 130(SSH Process)
This 6509 is functioning as a L2 access switch and has a very minimal config - only features running are dhcp snooping and 802.1x. Other engineers in my company use this command on 6509s (same IOS) daily with no issues. Unfortunately, I am unable to post any specific config info so I am just curious if anyone else has encountered this issue as I would love to know how a show command caused this issue.
Thanks,

show module
http://www.cisco.com/en/US/products/hw/switches/ps708/products_command_reference_chapter09186a00802dec4b.html#wp1029450
Please rate all helpful posts!
Chris

DB14 doesnu00B4t show brtools logs

Hi, we are doing backups with TSM. This software have an TDP agent that call brtools commands to execute a backup, but the transaction DB14 doesn´t show the logs in /oracle/VED/sapbackup, however if we do a backup with transaction DB13 then the transaction DB14 show the recently backup logs.
¿how can we to do for DB14 show all logs in /oracle/VED/sapbackup?

Hello Espartaco Yasik Gomez Gutierrez,
What is the SAP BASIS release and other platform details ?
What is the extension of log files which are not getting displayed in DB14 ?
Try to search in service marketplace, like following Note may help you
Note 1112726 - DBACOCKPIT: Button 'All' in 'DBA Logs' does not display data
Regards
Subbarao

Nexus 5000 command/log accounting

Good afternoon gentlemen
I need to configure the same as shown below in Nexus 5000 switches. The requirement is logging all user access login (whether failed or succeeded) and also logging all commands that users issue.
#IOS commands
no logging console
logging buffered 307200 informational
service timestamps log datetime localtime show-timezone
logging trap debugging
login on-failure log
login on-success log
archive
   log config
      logging enable
      logging size 500
      hidekeys
      notify syslog contenttype plaintext
By now, I only found the command "show accounting log". But no way to export to a syslog server I think.
If you guys have an idea please answear
Regards
Christian

Good afternoon gentlemen
I need to configure the same as shown below in Nexus 5000 switches. The requirement is logging all user access login (whether failed or succeeded) and also logging all commands that users issue.
#IOS commands
no logging console
logging buffered 307200 informational
service timestamps log datetime localtime show-timezone
logging trap debugging
login on-failure log
login on-success log
archive
   log config
      logging enable
      logging size 500
      hidekeys
      notify syslog contenttype plaintext
By now, I only found the command "show accounting log". But no way to export to a syslog server I think.
If you guys have an idea please answear
Regards
Christian

"show" commands.

Hi,
I need to view all the commands that user have executed on firewall via "Telnet" session. Looked at message id "%PIX-5-111008", but not sure if this logs "show" commands too.
-S-

Hello,
"show history" shows the last 10 issued command. Can be set the number to a higher.
I guess what you need is AAA accounting.
aaa account command "Tacacs+ServerGroup"
bye
FCS
Please rate me if I helped.

Sending 'show' command outputs to console/terminal using EEM

Hi Everyone,
I'm new to EEM and was wondering if it would be possible to send 'show' commands (like 'show interface' or 'show crypto ipsec sa') to the terminal/console session after every, let's say, 10 minutes using watchdog timer. I know how to send it to the flash but would like to know if something of this sort is possible.
Any suggestions would be really appreciated!
Regards,
Nikhil

Hi Nithakur,
you can try the "action puts" from EEM
event manager applet SHOWI
event timer watchdog time 600
action 1.0 cli command "enable"
action 2.0 cli command "show int X/Y"
action 3.0 puts "$_cli_result"
for this to work, you would need to have "logging monitor informational" in your run and "terminal monitor" activated. The other option is to use IOS send command
event manager applet SHOWI2
event timer watchdog time 600
action 1.0 cli command "enable"
action 2.0 cli command "show int XY"
action 3.0 set A "$_cli_result"
action 4.0 cli command "send *" pattern "C:"
action 5.0 cli command "$A\032" pattern "confirm"
action 6.0 cli command "yes"
Note that the \032 is an equivalent for CTRL+Z (^Z) so after you configure it, you will see this line as
action 5.0 cli command "$A^Z" pattern "confirm"
in your ruiining config.
Regards,
Alex

SHOW commands in SQLPlus

Where can I find a list / explanation of the SHOW commands in SQLPlus?
Thanks,

Hi,
Also, try this cool glogin script from Chris Foot to show the instance name in your SQL*Plus promt:
COLUMN file_name FORMAT a44
COLUMN tablespace_name FORMAT a20
COLUMN owner FORMAT a15
COLUMN segment_name FORMAT a20
set lines 132
set pages 100
set termout off
col dbname new_value prompt_dbname
select instance_name dbname from v$instance;
set sqlprompt "&&prompt_dbname> "
set termout on
set time on
Here are the set options:
APPI[NFO]ON
Application info for performance monitor (see DBMS_APPLICATION_INFO)
ARRAY[SIZE] {15|n}
Fetch size (1 to 5000) the number of rows that will be retrieved in one go.
AUTO[COMMIT] OFF|n}
Autocommit commits after each SQL command or PL/SQL block
AUTOP[RINT] OFF
Automatic PRINTing of bind variables.(see PRINT)
AUTORECOVERY ON
Configure the RECOVER command to automatically apply
archived redo log files during recovery - without any user confirmation.
AUTOT[RACE] OFF} [EXP[LAIN]] [STAT[ISTICS]]
Display a trace report for SELECT, INSERT, UPDATE or DELETE statements
EXPLAIN shows the query execution path by performing an EXPLAIN PLAN.
STATISTICS displays SQL statement statistics.
Using ON or TRACEONLY with no explicit options defaults to EXPLAIN STATISTICS
BLO[CKTERMINATOR] {.|c|OFF|ON}
Set the non-alphanumeric character used to end PL/SQL blocks to c
CMDS[EP] {;|c|OFF|ON}
Change or enable command separator - default is a semicolon (;)
COLSEP { |text}
The text to be printed between SELECTed columns normally a space.
COM[PATIBILITY] {V5|V6|V7|V8|NATIVE}
Version of oracle - see also init.ora COMPATIBILITY=
You can set this back by up to 2 major versions e.g. Ora 9 supports 8 and 7
CON[CAT] {.|c|OFF|ON}
termination character for substitution variable reference
default is a period.
COPYC[OMMIT] {0|n}
The COPY command will fetch n batches of data between commits.
(n= 0 to 5000) the size of each fetch=ARRAYSIZE.
If COPYCOMMIT = 0, COPY will commit just once - at the end.
COPYTYPECHECK OFF
Suppres the comparison of datatypes while inserting or appending to DB2
DEF[INE] {&|c|OFF|ON}
c = the char used to prefix substitution variables.
ON or OFF controls whether to replace substitution variables with their values.
(this overrides SET SCAN)
DESCRIBE [DEPTH {1|n|ALL}][LINENUM {ON|OFF}][INDENT {ON|OFF}]
Sets the depth of the level to which you can recursively describe an object
(1 to 50) see the DESCRIBE command
ECHO OFF
Display commands as they are executed
EMB[EDDED] OFF
OFF = report printing will start at the top of a new page.
ON = report printing may begin anywhere on a page.
ESC[APE] {\|c|OFF|ON}
Defines the escape character. OFF undefines. ON enables.
FEED[BACK] {6|n|OFF|ON}
Display the number of records returned (when rows > n )
OFF (or n=0) turns the display off
ON sets n=1
FLAGGER OFF|FULL}
Checks to make sure that SQL statements conform to the ANSI/ISO SQL92 standard.
non-standard constructs are flagged as errors and displayed
See also ALTER SESSION SET FLAGGER.
FLU[SH] OFF
Buffer display output (OS)
(no longer used in Oracle 9)
HEA[DING] OFF
print column headings
HEADS[EP] {||c|OFF|ON}
Define the heading separator character (used to divide a column heading onto > one line.)
OFF will actually print the heading separator char
see also: COLUMN command
INSTANCE [instance_path|LOCAL]
Change the default instance for your session, this command may only be issued when
not already connected and requires Net8
LIN[ESIZE] {150|n}
Width of a line (before wrapping to the next line)
Earlier versions default to 80, Oracle 9 is 150
LOBOF[FSET] n
Starting position from which CLOB and NCLOB data is retrieved and displayed
LOGSOURCE [pathname]
Change the location from which archive logs are retrieved during recovery
normally taken from LOG_ARCHIVE_DEST
LONG {80|n}
Set the maximum width (in chars) for displaying and copying LONG values.
LONGC[HUNKSIZE] {80|n}
Set the fetch size (in chars) for retrieving LONG values.
MARK[UP] HTML ON
[HEAD text] [BODY text] [TABLE text]
[ENTMAP {ON|OFF}][SPOOL {ON|OFF}]
[PRE[FORMAT] ON]
Output HTML text, which is the output used by iSQL*Plus.
NEWP[AGE] {1|n} NULL text
The number of blank lines between the top of each page and the top title.
0 = a formfeed between pages.
NULL text
Replace a null value with 'text'
The NULL clause of the COLUMN command will override this for a given column.
NUMF[ORMAT] format
The default number format.
see COLUMN FORMAT.
NUM[WIDTH] {10|n}
The default width for displaying numbers.
PAGES[IZE] {14|n}
The height of the page - number of lines.
0 will suppress all headings, page breaks, titles
PAU[SE] OFF
press [Return] after each page
enclose text in single quotes
RECSEP {WR[APPED]|EA[CH]|OFF}
Print a single line of the RECSEPCHAR between each record.
WRAPPED = print only for wrapped lines
EACH=print for every row
RECSEPCHAR {_|c}
Define the RECSEPCHAR character, default= ' '
SCAN OFF
OFF = disable substitution variables and parameters
SERVEROUT[PUT] OFF [SIZE n] [FOR[MAT] {WRA[PPED]|WOR[D_WRAPPED]|TRU[NCATED]}]
whether to display the output of stored procedures (or PL/SQL blocks)
i.e., DBMS_OUTPUT.PUT_LINE
SIZE = buffer size (2000-1,000,000) bytes
SHOW[MODE] OFF
Display old and new settings of a system variable
SPA[CE] {1|n}
The number of spaces between columns in output (1-10)
SQLBL[ANKLINES] ON
Allow blank lines within an SQL command. reverts to OFF after the curent command/block.
SQLC[ASE] {MIX[ED]|LO[WER]|UP[PER]}
Convert the case of SQL commands and PL/SQL blocks
(but not the SQL buffer itself)
SQLPLUSCOMPAT[IBILITY] {x.y[.z]}
Set the behavior or output format of VARIABLE to that of the
release or version specified by x.y[.z].
SQLCO[NTINUE] {> |text}
Continuation prompt (used when a command is continued on an additional line using a hyphen -)
SQLN[UMBER] OFF
Set the prompt for the second and subsequent lines of a command or PL/SQL block.
ON = set the SQL prompt = the line number.
OFF = set the SQL prompt = SQLPROMPT.
SQLPRE[FIX] {#|c}
set a non-alphanumeric prefix char for immediately executing one line of SQL (#)
SQLP[ROMPT] {SQL>|text}
Set the command prompt.
SQLT[ERMINATOR] {;|c|OFF|ON}|
Set the char used to end and execute SQL commands to c.
OFF disables the command terminator - use an empty line instead.
ON resets the terminator to the default semicolon (;).
SUF[FIX] SQL
Default file extension for SQL scripts
TAB OFF
Format white space in terminal output.
OFF = use spaces to format white space.
ON = use the TAB char.
Note this does not apply to spooled output files.
The default is system-dependent. Enter SHOW TAB to see the default value.
TERM[OUT] OFF
OFF suppresses the display of output from a command file
ON displays the output.
TERMOUT OFF does not affect the output from commands entered interactively.
TI[ME] OFF
Display the time at the command prompt.
TIMI[NG] OFF
ON = display timing statistics for each SQL command or PL/SQL block run.
OFF = suppress timing statistics
TRIM[OUT] OFF
Display trailing blanks at the end of each line.
ON = remove blanks, improving performance
OFF = display blanks.
This does not affect spooled output.
SQL*Plus ignores TRIMOUT ON unless you set TAB ON.
TRIMS[POOL] ON
Allows trailing blanks at the end of each spooled line.
This does not affect terminal output.
UND[ERLINE] {-|c|ON|OFF}
Set the char used to underline column headings to c.
VER[IFY] OFF
ON = list the text of a command before and after replacing substitution variables with values.
OFF = dont display the command.
WRA[P] OFF
Controls whether to truncate or wrap the display of long lines.
OFF = truncate
ON = wrap to the next line
The COLUMN command (WRAPPED and TRUNCATED clause) can override this for specific columns.

Switch doesn't show any log when AC is put in back.

I'm using two kind of switches i.e Cat2960S-24TD-L and Cat2960S-48TS-L with RPS2300 for backup power.
One question was raising in my head during the power redundancy test on the switches.
My question is how NMS can recognize that AC power is put in back as normal status without any log.
Each switch has two power sources. One from AC built-in power and the other from RPS2300 as below.
Access_SW#show env all
FAN is OK
TEMPERATURE is OK
Temperature Value: 39 Degree Celsius
Temperature State: GREEN
Yellow Threshold : 50 Degree Celsius
Red Threshold    : 60 Degree Celsius
SW PID                 Serial#     Status           Sys Pwr PoE Pwr Watts
1 Built-in                                         Good
2 Built-in                                         Good
SW Status          RPS Name          RPS Serial# RPS Port#
1   Active          RPS1              FDO1447YGT3 3
2   Active          RPS1              FDO1447YGT3 6
~snipped~
DCOut State   Connected Priority BackingUp WillBackup Portname        SW#
    1       Active No                6            No         Yes         <>                -
    2       Active No                6            No         Yes         <>                -
    3       Active Yes               6            No         Yes         Access_SW         1
    4       Active No                6            No         Yes         <>                -
    5       Active No                6            No         Yes         <>                -
    6       Active Yes               6            No         Yes         Access_SW         2
When I pull out the AC power cable out from the switch, it shows the proper log saying as below.
Access_SW#
Jul 8 17:15:46 UTC: %PLATFORM_ENV-1-PWR: Internal power supply not supplying power (Access_SW-2)
Access_SW#show env all
FAN is OK
TEMPERATURE is OK
Temperature Value: 39 Degree Celsius
Temperature State: GREEN
Yellow Threshold : 50 Degree Celsius
Red Threshold    : 60 Degree Celsius
SW PID                 Serial#     Status           Sys Pwr PoE Pwr Watts
1 Built-in                                         Good
2 Built-in                                         Unavail
SW Status          RPS Name          RPS Serial# RPS Port#
1   Active          RPS1             FDO1447YGT3 3
2   Active          RPS1              FDO1447YGT3 6
~snipped~
DCOut State   Connected Priority BackingUp WillBackup Portname        SW#
    1       Active No                6            No         Yes         <>                -
    2       Active No                6            No         Yes         <>                -
    3       Active Yes               6            No         Yes         Access_SW         1
    4       Active No                6            No         Yes         <>                -
    5       Active No                6            No         Yes         <>                -
    6       Active Yes               6            Yes        Yes         Access_SW         2
But I put AC power cable back into the switch, it doesn't show any log and any change to me. It still shows 'Built-in is Unavail' as below.
Access_SW#show env all
~snipped~
SW PID                 Serial#     Status           Sys Pwr PoE Pwr Watts
1 Built-in                                         Good
2 Built-in                                         Unavail
SW Status          RPS Name          RPS Serial# RPS Port#
1   Active          RPS1              FDO1447YGT3 3
2   Active          RPS1              FDO1447YGT3 6
~snipped~
DCOut State   Connected Priority BackingUp WillBackup Portname        SW#
    1 Active No                6 No         Yes         <>                -
    2 Active No                6 No         Yes         <>                -
    3 Active Yes               6 No         Yes         Access_SW         1
    4 Active No                6 No         Yes         <>                -
    5 Active No                6 No         Yes         <>                -
    6 Active Yes               6 Yes        Yes         Access_SW         2
The problem is how the operator can decide 'Now AC power is okay so I will push the button on RPS to make it backup again' without getting any information from the switch.

Hi innetee9228:
If the output of "show env all" doesn't change when you put the AC power back in, that's indicating a bigger problem. You see the %PLATFORM_ENV-1-PWR: message go when the power comes out, so there should be one when the power goes back. That's more indicative of an IOS problem where the status isn't getting updated as it should.
The SNMP agent rides along side the guts of the IOS that feed the SHOW commands. If the hardware isn't reporting correctly or whatever and "show env all" doesn't tell the truth, it's not likely that the SNMP agent is going to be receiving truth, either.
Once you have that addressed, you should be able to turn up power supply event traps and send them to whatever SNMP Manager you'd like, and have that alert your operator.
nms-6506-e(config)#snmp-server enable traps envmon supply ?
fan          Enable SNMP envmon fan traps
shutdown     Enable SNMP environmental monitor shutdown traps
status       Enable SNMP environmental status change traps
temperature Enable SNMP environmental monitor temperature traps
nms-6506-e(config)#

GlassFish Tools - Eclipse console does not show server log output

Hi,
I just installed the latest Glassfish Tools (6.2.1.201308190137) on Eclipse Kepler and Glassfish Server 3.1.2. But when I start the server and open the console ('view log file' button) there is no output displayed (also not during deployment). When I open the server.log file in a text editor I can clearly see the log output. Re-starting Eclipse, re-opening the console view didn't help. I have this bug both on Windows 8 and OSX 10.8.4.
Is there something obvious that I am missing? In my previous pre-kepler Eclipse installation this works like a charm (using the same glassfish server). Also the path to the log file displayed on the top of the console view is correct.
This might be related to the following thread:
GlassFish > View Log File opens in editor instead of console
Will have to use my old eclipse installation until this is resolved. Any help is appreciated.
-- Mike

Apparently, the GlassFish Tools for eclipse is expecting the log messages in 'ODLLogFormatter' format only, and will refuse to show any logs messages that don't adhere to this format.
I've tried configuring my logback messages to match this format, and that works until an exception is thrown and a log message is entered somewhere using the 'UniformLogFormatter' format, which then causes the server.log parser to refuse to show any more messages.
This is a bug, but I'm unsure where to report bugs now since the move to OEPE. (Was https://java.net/jira/browse/GLASSFISHPLUGINS)

SCCM report to show last logged on user and the Active Directory department attribute of that user.

I need to create an SCCM report to show last logged on user on all machines and the Active Directory department attribute of that last logged on user.

You problem is here.
right
join v_R_User USR on USR.ResourceID
= CS.ResourceID
USR.ResourceID != CS.ResourceID, you need to map the username to the user logon to the PC. By using the user’s department information you will
end up with unreliable results.
Anyways you need to make these changes to your query.
left
join v_R_User USR on USR.Unique_User_Name0
= CS.UserName0
http://www.enhansoft.com/

How to show the logged in User's displayName in a custom wsrp portlet

Hi,
I have a custom wsrp portlet added to webcenter space. Within the portlet I need to show the logged in(sso) user's displayName. I have tried using #{webCenterProfile[securityContext.userName].displayName} but its not working. Any pointers would be highly appreciated.
Regards,
Ann

You might want to post that in the [WebCenter Suite - Framework|http://forums.oracle.com/forums/forum.jspa?forumID=354] discussion board.
This area is strictly WebCenter Interaction which is a completely different product than Spaces.

At CRS-1,how can i use show command with pipe | ?

HI,ALL
when I use show command with pipe on the CRS-1,the command invalid
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors
                                                                   ^
% Invalid input detected at '^' marker.
========================================================
But Previously on the cisco 7609,I can use the show command
GZ-DM-SR-1.MAN.7609#show int | include line |err
Vlan1 is down, line protocol is down
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 interface resets
Vlan11 is administratively down, line protocol is down
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 interface resets
Vlan99 is down, line protocol is down
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 interface resets

RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors
                                                                   ^
% Invalid input detected at '^' marker.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |?
|
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | |?
                                                                    ^
% Invalid input detected at '^' marker.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | ?
begin    Begin with the line that matches
exclude Exclude lines that match
file     Save the configuration
include Include lines that match
utility A set of common unix utilities
<cr>
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |
% Incomplete command.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors
                                                                   ^
% Invalid input detected at '^' marker.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | ?
begin    Begin with the line that matches
exclude Exclude lines that match
file     Save the configuration
include Include lines that match
utility A set of common unix utilities
<cr>
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |?
|
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | include er$
Thu Jan 15 22:36:24.120 GMT
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line
Thu Jan 15 22:37:05.013 GMT
Loopback0 is up, line protocol is up
Loopback1 is up, line protocol is up
Loopback6 is up, line protocol is up
Null0 is up, line protocol is up
POS0/0/0/0 is up, line protocol is up (APS not Configured )
POS0/0/1/0 is up, line protocol is up (APS not Configured )
TenGigE0/0/4/0 is up, line protocol is up

Create a privilege level that only allows access to show commands

Hi,
I would like to create a privilege level that would only give access to the show commands for certain users. What would be the best way to do this?
Would I have to use the privilege mode level level command for every available show command or is there a more efficient way of doing this?
In addition, could we manage such a privilege level from a Radius Server.
Thanks for your help
Stéphane

Well, I think the best way to achive this is to use TACACS with command authorization feature.
Configuration on the tacacs server ( only for show commands, read only access)
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#scenario2
These commands are required on an IOS router or switch in order to implement command authorization through an ACS server:
    aaa new-model
    aaa authorization config-commands
    aaa authorization commands 0 default group tacacs+ local
    aaa authorization commands 1 default group tacacs+ local
    aaa authorization commands 15 default group tacacs+ local
     tacacs-server host 10.1.1.1
     tacacs-server key cisco123
These commands are required on ASA/PIX/FWSM in order to implement command authorization through an ACS server:
    aaa-server authserver protocol tacacs+
    aaa-server authserver host 10.1.1.1
    aaa authorization command authserver
However, if you strictly want to use radius server then please try the below listed attribute for a single user or group.
Service-Type = NAS Prompt
http://www.ietf.org/assignments/radius-types/radius-types.xml#radius-types-4
This might not work for ASDM.
HTH
Regards,
Jatin
Do rate helpful posts-

Show commands logging ?

Similar Messages

Maybe you are looking for