Dell Force10 C150 Configuration Manual page 924

Figure 45-2. Configuring a Custom Privilege Level
FTOS(conf)#username john privilege 8 password john
FTOS(conf)#enable password level 8 notjohn
FTOS(conf)#privilege exec level 8 configure
FTOS(conf)#privilege config level 8 snmp-server
FTOS(conf)#end
FTOS#show running-config
Current Configuration ...
!
hostname Force10
!
enable password level 8 notjohn
enable password force10
!
username admin password 0 admin
username john password 0 john privilege 8
!
Figure 45-3
confirms that "john" is in privilege level 8. In the EXEC Privilege mode, "john" can access only the
commands listed. In CONFIGURATION mode, "john" can access only the
Figure 45-3. User john's Login and the List of Available Commands
apollo% telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: john
Password:
FTOS#show priv
Current privilege level is 8
FTOS#?
configure
disable
enable
exit
no
show
terminal
traceroute
FTOS#confi
FTOS(conf)#?
end
Specify LINE mode password and privilege
You can specify a password authentication of all users on different terminal lines. The user's privilege
level will be the same as the privilege level assigned to the terminal line, unless a more specific privilege
level is is assigned to the user.
924 | Security
is a screen shot of the Telnet session for user "john". The
Configuring from terminal
Turn off privileged commands
Turn on privileged commands
Exit from the EXEC
Negate a command
Show running system information
Set terminal line parameters
Trace route to destination
Exit from Configuration mode
The user john is assigned privilege level
8 and assigned a password.
All other users are assigned a password
to access privilege level 8
The command configure is assigned to
privilege level 8 since it is needed to
reach the CONFIGURATION mode
where the snmp-server commands are
located.
The snmp-server commands, in the
CONFIGURATION mode, are assigned
to privilege level 8.
show privilege
command output
snmp-server
commands.