Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc.,

What is the minimum enable level we need to grant to the service account? If the answer is too subjective, I atleast want to know what is the minimum enable required for Cisco IOS devices.

share|improve this question
add comment

3 Answers

up vote 1 down vote accepted

You can use the command: privilege exec level 6 show running

user joe pass whatever priv 6

joe should be able to do the show run config command

share|improve this answer
2  
To expand on this; the more system:running-config command may be more appropriate for backups since it fully reports some of the encryption key and password information that's otherwise obscured in a standard show running-config. If you're using a tool like RANCID, the set of commands that it wants to run is significantly larger, as well. –  Shane Madden Jun 15 '11 at 17:00
    
If I understand correctly, we are assigning custom privilege levels to restrict permitted commands that can be run. Is there anything similar for Juniper equipments? that is the only other major equipment that I am maintaining. –  Benny Jun 15 '11 at 18:59
add comment

As far as I know, enable/privilegie level 15 is required.

share|improve this answer
add comment

For Juniper, you must be super-user class I believe:

set system login user username class super-user

this will do the trick.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.