I'm just wondering, do you need to have a certain privilege level to set up a SPAN port on a Cisco switch? if so, what minimum level is required to set up a SPAN port?

I have no networking experience, so I'm not sure if this is a dumb question or not. I just need a answer as I'm working on a tool to interact with a switch, and this came to mind.

  • 1
    You need to be able to get to confuigre mode, which usually requires level 15 access. What exactly are you trying to accomplish?
    – Ron Trunk
    Feb 8, 2016 at 16:02
  • i'm creating a tool for college that will allow users to set up span ports on a switch, so they have a user interface that will require them to enter in there login details and then they can set the sources port and destination port per session
    – noobCoder
    Feb 8, 2016 at 16:08
  • 3
    A organization big enough to need your tool will likely use TACACS to control access to switches. It's easier to control access there than by configuring privilege levels.
    – Ron Trunk
    Feb 9, 2016 at 3:35

1 Answer 1


There is no privilege level which specifically allows users to change only monitor port.

You need to make a view (Role-Based CLI Access) which only allows a specific command, and assign it to the privileges:


  1. enable view
  2. configure terminal
  3. parser view view-name [inclusive]
  4. secret [0 | 5] encrypted-password
  5. commands parser-mode {exclude | include-exclusive | include} [all] [interface interface-name | command]
  6. end
  7. enable [privilege-level | view view-name]
  8. show parser view all

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.