Hi,<div><br></div><div>I&#39;m trying to restrict the running of show commands on a more granular level. I just can&#39;t figure out how to do it.</div><div><span class="Apple-style-span" style="font-family:verdana,arial,helvetica,sans-serif"><br>
</span></div><div><span class="Apple-style-span" style="font-family:verdana,arial,helvetica,sans-serif">What I want is a user to be able to perform</span></div><div><span class="Apple-style-span" style="font-family:verdana,arial,helvetica,sans-serif"><br>
</span></div><div><span class="Apple-style-span" style="font-family:verdana,arial,helvetica,sans-serif">show run interface fa0/1 (For example)</span></div><div><span class="Apple-style-span" style="font-family:verdana,arial,helvetica,sans-serif"><br>
</span></div><div><span class="Apple-style-span" style="font-family:verdana,arial,helvetica,sans-serif">but not perform a</span></div><div><span class="Apple-style-span" style="font-family:verdana,arial,helvetica,sans-serif"><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
<br></p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">show run</p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
<br></p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">or</p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
<br></p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">show run interface vlan</p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
<br></p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">relevant tac config is</p><pre style="margin-top:10px;margin-right:10px;margin-bottom:10px;margin-left:10px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
<code style="font-style:normal;font-weight:normal">cmd = &quot;show&quot; {
permit &quot;/^running-config interface/&quot; 
}
</code></pre><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">This appears to be just allowing all show commands. I&#39;ve tried different expressions after googling several different configs, but everything I try appear to just deny all show commands, or allows them all.</p>
<p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px"><br></p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
I believe this is possible to do. I just need to know what I&#39;m missing and how this should be formatted.</p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
<br></p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">Much appreciated.</p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">
<br></p><p style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px">Dave.</p></span></div>