Configuring Multiple Privilege Levels; Setting The Privilege Level For A Command - Allen-Bradley Stratix 5100 User Manual

Configuring Multiple
Privilege Levels
By default, Cisco IOS software has two modes of password security: user EXEC
and privileged EXEC. You can configure up to 16 hierarchical levels of
commands for each mode. By configuring multiple passwords, you can allow
different sets of users to have access to specified commands.
For example, if you want many users to have access to the
command, you can assign it level 2 security and distribute the level 2 password
fairly widely. But if you want more restricted access to the
command, you can assign it level 3 security and distribute that password to a
more restricted group of users.

Setting the Privilege Level for a Command

Beginning in privileged EXEC mode, follow these steps to set the privilege level
for a command mode:
1. Enter global configuration mode.
configure terminal
2. Set the privilege level for a command.
• For
, enter
mode
EXEC mode,
for line configuration mode.
• For
, the range is from 0...15. Level 1 is for normal user EXEC
level
mode privileges. Level 15 is the level of access permitted by the
password.
• For
command
access.
privilege mode level level command
3. Specify the enable password for the privilege level.
• For
, the range is from 0...15. Level 1 is for normal user EXEC
level
mode privileges.
• For
, specify a string from 1...25 alphanumeric characters. The
password
string cannot start with a number, is case sensitive, and allows spaces but
ignores leading spaces. By default, no password is defined.
TIP Characters TAB, ?, $, +, and [ are invalid characters for passwords.
enable password level level password
4. Return to privileged EXEC mode.
end
5. Verify your entries.
The first command provides the password and access level configuration.
The second command provides the privilege level configuration.
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
for global configuration mode,
configure
for interface configuration mode, or
interface
, specify the command that you want to have restricted
Administering the WAP Access Chapter 6
clear line
configure
exec
line
enable
for
207