Superseding Privilege Levels With The All Keyword; Removing The All Keyword; Setting Default Line Privilege - Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Configuration Manual

Superseding Privilege Levels with the all Keyword

Issuing the all keyword supersedes privilege levels that were previously set without
the all keyword.
In the following example, the snmp-server-community command is set to level 7,
and the snmp keyword is set to level 6. The privilege level of the snmp keyword
does not override the snmp-server community setting, because both of these
commands are set without the all keyword.
All snmp commands are then changed to level 5 with the all keyword.
The show configuration output displays all snmp commands at level 5, superseding
the existing level 6 setting. The snmp-server community command is still present
in the show configuration output, but it is ineffective.

Removing the all Keyword

Using the no version or reset version removes the all keyword and restores default
privilege levels.
If the privilege setting of the mode or command for which you are restoring default
privilege levels takes precedence over any ineffective privilege settings, those settings
will automatically take effect according to the order of precedence (see "Using the
Order of Precedence" on page 60 ).
The difference between the no version and the reset version is that the reset version
removes the configuration from the show configuration output. This is useful when
you want to remove a configuration that has been overridden and rendered ineffective
by a privilege level that takes precedence.

Setting Default Line Privilege

The factory default privilege level for the console line and all vty lines is 1. However,
you can use the privilege level command in Line Configuration mode to set the
default login privilege for the console line or any number of vty lines.
To change the default privilege level:
1.
host1(config)#privilege configure level 7 snmp-server community
host1(config)#privilege configure level 6 snmp
host1(config)#privilege configure all level 5 snmp
host1#show config category management cli command-privileges
privilege configure level 7 snmp-server community
privilege configure all level 5 snmp-server
Access line configuration mode on the router for the console.
host1(config)#line console 0
host1(config-line)#
Chapter 2: Command-Line Interface
CLI Command Privileges
61