Setting The Login Passwords; Setting Privilege Levels; Assigning Allowable Commands; Setting The Console Port Time−Out Value - Cisco RJ-45-to-AUX Brochure

Setting the Login Passwords

By default, Cisco switches have no passwords configured when they are shipped. On the Cisco IOS−based
switches, different priority levels of authority are available for console access. You can define two levels on
IOS−based switches: privilege level 1, which is equivalent to User EXEC mode; and privilege level 15, which
is equivalent to Privileged EXEC mode. Use the following commands to set the two levels' passwords (the
password for level 1 will be noaccess, and the password for level 15 will be noone):
Switch> enable
Switch# Configure terminal
Switch (config) enable password level 1 noaccess
Switch (config) enable password level 15 noone
Related solutions:
Creating a Standard Access List
Creating an Extended Access List
Enabling Port Security

Setting Privilege Levels

Using the privilege level command allows you to assign a better−defined set of commands for a selected user.
Let's walk through how to do this:
1. Select a user and associate that user with a privilege level. In this example I will use myself and the
login name SeanO. I'll assign myself a privilege level of 3. To do this, use the following command in
Global Configuration Mode:
5000RSM(config)# privilege configure level 3 seano
5000RSM(config)#
2. You should assign an enable password for each configured privilege level. To assign the password a
privilege level of 3, use the following command:
5000RSM(config)# enable secret level 3 sean1
3. To get into the switch, I will now use the following command:
5000RSM(config)# username seano password sean1

Assigning Allowable Commands

To allow a user to use only certain show commands, but give him no access to debug or configuration
commands, use the following command:
5000RSM(config)# privilege exec level 3 show
5000RSM(config)#
To allow users with privilege level 3 a specific command syntax for debug, such as debug ip, use the
following command:
5000RSM1(config)# privilege exec level 3 debug ip
5000RSM1(config)#
Note Privilege level 0 includes five commands: disable, enable, exit, help, and logout.
Setting the Console Port Time−out Value
To configure a time−out value for IOS−based Cisco switches, use the following command:
CAT2924XL(config)# line console
CAT2924XL(config)# time−out 300
Found on page:
402
403
411
40