Hi,
Thanks for getting back to me,
In my situation, as a network implementer I'm always getting asked for configs from engineering, who put change control together but don't have access to any devices.
Engineering are trusted with the configs but I'd rather not give them access to stuff up our snmp monitoring as they only need read access.
Where some of our apps guys only have access to see if their portchannels are up to the LB or Blade Chassis (perfect normal user)
we also have two copies of rancid configs, one for implementers will full config, another with snmp /device passwords stripped for eng access
I was just going to script the stripped configs in the observium watch dir etc.
global read to me should mean global read ha ha, not global read except rancid configs :-) Just a thought but, my situation may be unique
Regards, Daniel