Dell Force10 Z9000 Configuration Manual page 791

Step Command Syntax
privilege mode {level level
3
command | reset command}
To view the configuration, use the
Figure 39-2 is an example of a configuration to allow a user "john" to view only the EXEC mode
commands and all
commands and, by default, found in the CONFIGURATION mode, you must also assign the launch
command for the CONFIGURATION mode,
commands.
Figure 39-2. Configuring a Custom Privilege Level
FTOS(conf)#username john privilege 8 password john
FTOS(conf)#enable password level 8 notjohn
FTOS(conf)#privilege exec level 8 configure
FTOS(conf)#privilege config level 8 snmp-server
FTOS(conf)#end
FTOS#show running-config
Current Configuration ...
!
hostname FTOS
!
enable password level 8 notjohn
enable password force10
!
username admin password 0 admin
username john password 0 john privilege 8
!
Figure 39-3 is a screen shot of the Telnet session for user "john". The
confirms that "john" is in privilege level 8. In the EXEC Privilege mode, "john" can access only the
commands listed. In CONFIGURATION mode, "john" can access only the
Command Mode
CONFIGURATION
show running-config
snmp-serve
r commands. Since the
Purpose
Configure level and commands for a mode or
reset a command's level. Configure the
following required and optional parameters:
mode: Enter a keyword for the modes (exec,
•
configure, interface, line, route-map, router)
level level range: 0 to 15. Levels 0, 1 and 15
•
are pre-configured. Levels 2 to 14 are
available for custom configuration.
command: A FTOS CLI keyword (up to 5
•
keywords allowed).
reset: Return the command to its default
•
privilege mode.
command in the EXEC Privilege mode.
snmp-server
commands are "enable" level
configure
, to the same privilege level as the
The user john is assigned privilege level
8 and assigned a password.
All other users are assigned a password
to access privilege level 8
The command configure is assigned to
privilege level 8 since it is needed to
reach the CONFIGURATION mode
where the snmp-server commands are
located.
The snmp-server commands, in the
CONFIGURATION mode, are assigned
to privilege level 8.
snmp-server
show privilege
command output
snmp-server
commands.
Security | 791