Role-Based CLI Access

Packet Tracer 5.3可以做，较旧的IOS版本做不了。

要使用基于角色的CLI视图,需满足：

1。启用AAA
2。设置enable密码（pass、secret均可）

使用方法

进入管理模式
Router#enable view root
Password:
Router#%PARSER-6-VIEW_SWITCH: successfully set to view ‘root’.

Router#conf  t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#parser view test
!创建新视图test
Router(config-view)#%PARSER-6-VIEW_CREATED: view ‘test’ successfully created.

Router(config-view)#secret 0 ipcpu
Router(config-view)#?
View commands:
  commands  Configure commands for a view //设置可以执行的命令
  default   Set a command to its defaults
  exit      Exit from view configuration mode
  no        Negate a command or set its defaults
  secret    Set a secret for the current view
Router(config-view)#

测试，默认没有几个命令
Router#enable view test
Password:
Router#%PARSER-6-VIEW_SWITCH: successfully set to view ‘test’.

Router#?
Exec commands:
  disable     Turn off privileged commands
  enable      Turn on privileged commands
  exit        Exit from the EXEC
  logout      Exit from the EXEC
Router#

官网有几个角色命令的例子，相关命令等级的划分可参考官网

官网链接：
Cisco IOS Role-Based Access Control with SDM