Configuring User Privilege And Command Levels; Introduction; Configuring A User Privilege Level - H3C SR6600 Fundamentals Configuration Manual

Configuring User Privilege and Command Levels

Introduction

To avoid unauthorized access, the switch defines user privilege levels and command levels. User
privilege levels correspond to command levels. When a user at a privilege level logs in, the user can
only use commands at that level, and lower levels.
All the commands are categorized into four levels, which are visit, monitor, system, and manage from
low to high, and identified respectively by 0 through 3.
Table 1-5 Default command levels
Level
0
1
2
3

Configuring a User Privilege Level

A user privilege level can be configured by using AAA authentication parameters or under a user
interface.
Configure user privilege level by using AAA authentication parameters
If the authentication mode of a user interface is scheme, the user privilege level of users logging into the
user interface is specified in AAA authentication configuration.
Follow these steps to configure the user privilege level by using AAA authentication parameters:
To do...
Enter system view
Enter user interface view
Privilege
Involves commands for network diagnosis and commands for accessing an
external device. Configuration of commands at this level cannot survive a device
restart. Upon device restart, the commands at this level will be restored to the
Visit
default settings.
Commands at this level include ping, tracert, telnet and ssh2.
Involves commands for system maintenance and service fault diagnosis.
Commands at this level are not allowed to be saved after being configured. After
the switch is restarted, the commands at this level will be restored to the default
Monitor
settings.
Commands at this level include debugging, terminal, refresh, reset, and send.
Provides service configuration commands, including routing configuration
commands and commands for configuring services at different network levels.
System
By default, commands at this level include all configuration commands except for
those at manage level.
Involves commands that influence the basic operation of the system and
commands for configuring system support modules.
By default, commands at this level involve the configuration commands of file
Manage
system, FTP, TFTP, Xmodem download, user management, level setting, and
parameter settings within a system (which are not defined by any protocols or
RFCs).
system-view
user-interface { first-num1
[ last-num1 ] | { aux | console |
vty } first-num2 [ last-num2 ] }
Table 1-5
Description
Use the command...
1-15
describes the levels of the commands.
Remarks
—
—