Junos OS

 View Only
last person joined: 3 days ago 

Ask questions and share experiences about Junos OS.
Back to discussions
Expand all | Collapse all

deny-commands to stop show interfaces

  • 1.  deny-commands to stop show interfaces

    Posted 08-14-2023 08:52

    hi all,

    I am sure this may seem like an odd topic as to why you wouldn't want someone to see interfaces. However I have a case where I'd like to restrict the view of some of my interfaces.

    In my case I would like to deny visibility of my gr-0/0/0, lo0 and a security zone named ABC123. I thought the following would work, does anyone have any thoughts?

    set system login class DENY permissions all deny-commands "(^show interfaces (gr-0/0/0|lo0))|(^show security zones NABC123)"

    Thank you as always for any and all help.



    ------------------------------
    Liam
    ------------------------------