1

We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc.,

What is the minimum enable level we need to grant to the service account? If the answer is too subjective, I atleast want to know what is the minimum enable required for Cisco IOS devices.

Benny
  • 181
  • 1
  • 7

3 Answers3

1

As far as I know, enable/privilegie level 15 is required.

3molo
  • 4,330
  • 5
  • 32
  • 46
1

You can use the command: privilege exec level 6 show running

user joe pass whatever priv 6

joe should be able to do the show run config command

evolvd
  • 1,384
  • 6
  • 33
  • 58
  • 3
    To expand on this; the `more system:running-config` command may be more appropriate for backups since it fully reports some of the encryption key and password information that's otherwise obscured in a standard `show running-config`. If you're using a tool like [RANCID](http://www.shrubbery.net/rancid/), the set of commands that it wants to run is significantly larger, as well. – Shane Madden Jun 15 '11 at 17:00
  • If I understand correctly, we are assigning custom privilege levels to restrict permitted commands that can be run. Is there anything similar for Juniper equipments? that is the only other major equipment that I am maintaining. – Benny Jun 15 '11 at 18:59
1

For Juniper, you must be super-user class I believe:

set system login user username class super-user

this will do the trick.

SpacemanSpiff
  • 8,753
  • 1
  • 24
  • 35