Question

A network administrator wants junior technicians to log into a Catalyst switch and be able to run all show commands and clear counters, but NOT enter global configuration mode or reload the device. The administrator prefers a solution local to the device that avoids assigning each command an individual privilege level. Which approach best meets this requirement?

Accepted Answer

Configure a CLI parser view with 'parser view TECH' and associate only the permitted commands, then require Role-Based CLI access at login

Answer

Set 'privilege exec level 15 show' so technicians receive privilege level 15 automatically on login

Answer

Create a local user with 'username tech privilege 1' and rely on the default privilege 1 restrictions

Answer

Enable 'aaa authorization exec default none' so all commands are permitted without restriction