Switching User Level - H3C S5100-SI Series Operation Manual

Operation Manual – Login
H3C S5100-SI/EI Series Ethernet Switches
Follow these steps to set the level of a command in a specific view:
Enter system view
Configure the level of a
command in a specific view
Caution:
It is recommended not to change the level of a command arbitrarily, for it may cause
inconvenience to maintenance and operation.
When you change the level of a command with multiple keywords, you should input
the keywords one by one in the order they appear in the command syntax.
Otherwise, your configuration will not take effect.
II. Configuration example
The network administrator (a level 3 user) wants to change some TFTP commands
(such as tftp get) from level 3 to level 0, so that general Telnet users (level 0 users) are
able to download files through TFTP.
# Change the tftp get command in user view (shell) from level 3 to level 0. (Originally,
only level 3 users can change the level of a command.)
<Sysname> system-view
[Sysname] command-privilege level 0 view shell tftp
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get
[Sysname]
bootrom.btm
After the above configuration, general Telnet users can use the tftp get command to
download file bootrom.btm and other files from TFTP server 192.168.0.1 and other
TFTP servers.

5.2.3 Switching User Level

After logging into the switch, users can change their current user levels through a
command. Note that:
If a switching password is set for a specific user level by the super password
command, all users must enter the password correctly when they switch from
lower user levels to this level (if a wrong password is entered, they will remain at
their original levels).
To do...
command-privilege
Use the command...
system-view
command-privilege level
level view view command
level 0 view shell
5-3
Chapter 5 CLI Configuration
Remarks
—
Required
tftp 192.168.0.1 get