1

We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc.,

What is the minimum enable level we need to grant to the service account? If the answer is too subjective, I atleast want to know what is the minimum enable required for Cisco IOS devices.

3 Answers 3

1

You can use the command: privilege exec level 6 show running

user joe pass whatever priv 6

joe should be able to do the show run config command

2
  • 3
    To expand on this; the more system:running-config command may be more appropriate for backups since it fully reports some of the encryption key and password information that's otherwise obscured in a standard show running-config. If you're using a tool like RANCID, the set of commands that it wants to run is significantly larger, as well. Jun 15, 2011 at 17:00
  • If I understand correctly, we are assigning custom privilege levels to restrict permitted commands that can be run. Is there anything similar for Juniper equipments? that is the only other major equipment that I am maintaining.
    – Benny
    Jun 15, 2011 at 18:59
1

As far as I know, enable/privilegie level 15 is required.

1

For Juniper, you must be super-user class I believe:

set system login user username class super-user

this will do the trick.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .