@Jon_P wrote:
Hi,
Users connecting to our VOSS devices using a read-only account are unable to use any of the 'show lldp' commands.
My questions are:
Is this intentional, or a bug?
Is there any change I can make that will result in the read-only users being able to use these commands?
(This is on 5520-24x and VSP-7400s running 9.0.2.0.)
Read-only users on VOSS devices typically can't use show lldp commands for security reasons. The best solution is to use Role-Based Access Control (RBAC) if available to grant specific show lldp access without broader permissions. Command authorization is a less ideal alternative. Creating scripts/aliases is discouraged due to security risks. TACACS+/RADIUS offers centralized control but is more complex. Always follow the principle of least privilege and audit access to sensitive commands.
