17 December, 2013

Configure Monitor User in CISCO Permit Only show commands

R1#conf terminal
R1(config)#aaa new-model
R1(config)#enable secret cisco123
R1(config)#exit
R1#enable view
Password: cisco123
*Mar  1 01:43:25.263: %PARSER-6-VIEW_SWITCH: successfully set to view 'root'.
R1#configure terminal
R1(config)#parser view monuser
*Mar  1 01:21:24.339: %PARSER-6-VIEW_CREATED: view 'monuser' successfully created.
R1(config-view)#secret monuser123
R1(config-view)#commands exec include show version
R1(config-view)#commands exec include show processes cpu sorted
R1(config-view)#commands exec include all show ip
R1(config-view)#exit
R1(config)#exit
R1>enable view monuser
Password: monouser123

R1#?
Exec commands:
  <1-99>  Session number to resume
  enable  Turn on privileged commands
  exit    Exit from the EXEC
  show    Show running system information

R1#show ?
  flash:   display information about flash: file system
  ip       IP information
  parser   Display parser information
  slot0:   display information about slot0: file system
  version  System hardware and software status

R1#show version
Cisco IOS Software, 3700 Software (C3725-ADVIPSERVICESK9-M), Version 12.4(25c), RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Fri 12-Feb-10 01:56 by prod_rel_team
<Omitted>

R1#show ip ?
  accounting              The active IP accounting database
  admission               Network Admission Control information
  aliases                 IP alias table
  arp                     IP ARP table
  as-path-access-list     List AS path access lists
<Omitted>

R1#show processes cpu sorted
CPU utilization for five seconds: 5%/100%; one minute: 2%; five minutes: 2%
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
 207       16064      6592       2436  4.66%  2.09%  1.32%  98 SSH Process
  80        2420      4671        518  0.16%  0.07%  0.05%   0 IP Input
 106         660      9916         66  0.08%  0.05%  0.03%   0 CEF process
 108        2748      4131        665  0.08%  0.14%  0.09%   0 TCP Timer
<Omitted>

!
Associating a user account with parser viewR1(config)# username david view monuser secret 12345