Configuring User Privilege Levels And Command Levels - 3Com 4510G Configuration Manual

To do...
Enter system view
Enable the command alias
function
Configure command aliases

Configuring User Privilege Levels and Command Levels

Introduction
To restrict the different users' access to the device, the system manages the users by their privilege
levels. User privilege levels correspond to command levels. After users at different privilege levels log
in, they can only use commands at their own, or lower, levels. All the commands are categorized into
four levels, which are visit, monitor, system, and manage from low to high, and identified respectively
by 0 through 3. Table 9-3
Table 9-3 Default command levels
Level Privilege
0 Visit
1 Monitor
2 System
3 Manage
Configuring user privilege level
User privilege level can be configured by using AAA authentication parameters or under a user
interface.
1) Configure user privilege level by using AAA authentication parameters
If the user interface authentication mode is scheme when a user logs in, and username and password
are needed at login, then the user privilege level is specified in the configuration of AAA authentication.
Use the command...
system-view
command-alias enable
command-alias mapping
cmdkey alias
describes the levels of the commands.
Involves commands for network diagnosis and commands for accessing
an external device. Commands at this level are not allowed to be saved
after being configured. After the device is restarted, the commands at
this level will be restored to the default settings. Commands at this level
include ping, tracert, telnet and ssh2.
Includes commands for system maintenance and service fault diagnosis.
Commands at this level are not allowed to be saved after being
configured. After the device is restarted, the commands at this level will
be restored to the default settings. Commands at this level include
debugging, terminal, refresh, reset, and send.
Provides service configuration commands, including routing and
commands at each level of the network for providing services. By
default, commands at this level include all configuration commands
except for those at manage level.
Influences the basic operation of the system and the system support
modules for service support. By default, commands at this level involve
file system, FTP, TFTP, Xmodem command download, user
management, level setting, as well as parameter setting within a system
(the last case involves those non-protocol or non RFC provisioned
commands).
9-9
Remarks
—
Required
Disabled by default, that is, you
cannot configure command
aliases.
Required
Not configured by default.
Description