Extreme switch run all show command with priv-lvl = 1

[bantify]

Hello,

I want ready only user can run all show command in extreme switch:

My tacacs config:

    profile operator-profile {
        script {
            # ===== Generic Shell / Extreme =====
            if (service == shell) {
                if (cmd == "") {
                    set priv-lvl = 1
                    permit
                }
	      if (cmd =~ /^show*/)
				  permit
               if (cmd =~ /^exit/)
				  permit
               deny
            }

            # ===== Junos Devices =====
            if (service == junos-exec) {
                if (cmd == "") {
                    set local-user-name = tacop
                    permit
                }
			   if (cmd =~ /^show*/)
				  permit
               if (cmd =~ /^exit/)
				  permit
               deny
            }

            # ===== F5 LTM Devices =====
            if (service == f5-ltm) {
                if (cmd == "") {
                    set F5-LTM-User-Info-1 = Guest
                    permit
                }
			   if (cmd =~ /^show*/)
				  permit
               if (cmd =~ /^exit/)
				  permit
               deny
            }
        }
    }

In extreme switch:

configure tacacs primary server 10.74.6.44 49 client-ip 10.74.3.219 vr VR-Mgmt
configure tacacs primary shared-secret mykey
enable tacacs
configure tacacs priv-lvl required
disable radius

When i login with operator profile, i can not run show command like:

Techref_cml_SW1.1 > show configuration 
This user does not have permissions for this command.
Techref_cml_SW1.2 > 

Regards.

[MarcJHuber]

Hi,

I've no experience with that Extreme switches. On Cisco gear you'd need to be at priv-lvl 15, so setting it to that for Extreme too might be a worth a try.

Cheers,

Marc