Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
I am sure this may seem like an odd topic as to why you wouldn't want someone to see interfaces. However I have a case where I'd like to restrict the view of some of my interfaces.
In my case I would like to deny visibility of my gr-0/0/0, lo0 and a security zone named ABC123. I thought the following would work, does anyone have any thoughts?
set system login class DENY permissions all deny-commands "(^show interfaces (gr-0/0/0|lo0))|(^show security zones NABC123)"
Thank you as always for any and all help.