System information

ISR Overview and Providing Secure Administrative Access 95

Step 5

Add available commands to the view: The commands parser_mode

{include | include-exclusive | exclude} [all] [interface

interface_identiﬁer | command] command, issued in view conﬁguration

mode, allows an administrator to specify a command (or interface)

available to a particular view. Example 3-15 shows how to specify that

the copy command (followed by any keywords), the traceroute

command, and the ping command will be available to a speciﬁc view

(HELPDESK in this example).

Step 6 Verify the role-based CLI view conﬁguration: After creating a view,

you can switch to that view with the enable view name command. After

switching to the new view, you enter a ?, for context-sensitive help, to see

what commands are available in your new view, as demonstrated in

Example 3-16.

Protecting Router Files

To protect a router’s image and conﬁguration from an attacker’s attempt to erase those ﬁles,

the Cisco IOS Resilient Conﬁguration feature keeps a secure copy of these ﬁles. These ﬁles

are called the bootset. Table 3-8 details the steps required to conﬁgure Cisco IOS Resilient

Conﬁguration.

Example 3-15 Specifying Commands Available to a View

R1(config-view)# cc

Example 3-16 Conﬁrming Role-Based CLI Conﬁguration

R1# ee

Password:

R1#?

Exec commands:

<1-99> Session number to resume

copy Copy from one file to another

enable Turn on privileged commands

exit Exit from the EXEC

ping Send echo messages

show Show running system information

traceroute Trace route to destination