Setting And Erasing Passwords; Privilege Levels; Table 45: Commands Available At Different Privilege Levels - Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Configuration Manual

Setting and Erasing Passwords

You can set the following passwords:

Privilege Levels

Different groups of commands are associated with privilege levels (Table 45 on
page 421). You can set enable passwords to allow users to access commands at
different privilege levels.

Table 45: Commands Available at Different Privilege Levels

To maximize security and usability, set different passwords for levels 1, 5, 10, and
15. By default, no enable passwords exist.
Use to encrypt passwords that are saved in the system's configuration file. The
command converts plain text to cipher text. The default is no encryption.
Use of this command prevents casual observers from viewing passwords, for
example, in data obtained from show config displays. The command is not
intended to provide protection from serious analysis.
This command does not apply to passwords set with enable secret, enable
password, or password (Line Configuration mode).
This command does apply to authentication key passwords and BGP neighbor
passwords.
Example
host1(config)#service password-encryption
Use the no version to remove the encryption assignment.
See service password-encryption.
Enable passwords that control access to different groups of commands.
A console password that controls access to the console.
Passwords for individual vty lines or groups of vty lines.
Privilege Level Commands Available
0 help, exit, enable, and disable commands
1 User Exec commands plus commands at level 0
5 Privileged Exec show commands plus commands at levels 0 and 1
10 All commands except support commands
15 Support commands that Juniper Networks Technical Support may provide and
all other commands
Chapter 7: Passwords and Security
Setting and Erasing Passwords
421