Setting Passwords For Recovering From A Lost - Foundry Networks Switch and Router Installation And Configuration Manual

Foundry Switch and Router Installation and Configuration Guide
Setting Passwords for Management Privilege Levels
You can set one password for each of the following management privilege levels:
• Super User level – Allows complete read-and-write access to the system. This is generally for system
administrators and is the only management privilege level that allows you to configure passwords.
• Port Configuration level – Allows read-and-write access for specific ports but not for global (system-wide)
parameters.
• Read Only level – Allows access to the Privileged EXEC mode and CONFIG mode of the CLI but only with
read access.
You can assign a password to each management privilege level. You also can configure up to 16 user accounts
consisting of a user name and password, and assign each user account to one of the three privilege levels. See
"Setting Up Local User Accounts" on page 3-12.
NOTE: You must use the CLI to assign a password for management privilege levels. You cannot assign a
password using the Web management interface.
If you configure user accounts in addition to privilege level passwords, the device will validate a user's access
attempt using one or both methods (local user account or privilege level password), depending on the order you
specify in the authentication-method lists. See "Configuring Authentication-Method Lists" on page 3-47.
USING THE CLI
To set passwords for management privilege levels:
1. At the opening CLI prompt, enter the following command to change to the Privileged level of the EXEC mode:
BigIron> enable
BigIron#
2. Access the CONFIG level of the CLI by entering the following command:
BigIron# configure terminal
BigIron(config)#
3. Enter the following command to set the Super User level password:
BigIron(config)# enable super-user-password <text>
NOTE: You must set the Super User level password before you can set other types of passwords.
4. Enter the following commands to set the Port Configuration level and Read Only level passwords:
BigIron(config)# enable port-config-password <text>
BigIron(config)# enable read-only-password <text>
NOTE: If you forget your Super User level password, see "Recovering from a Lost Password" on page 3-11.
Augmenting Management Privilege Levels
Each management privilege level provides access to specific areas of the CLI by default:
• Super User level provides access to all commands and displays.
• Port Configuration level gives access to:
• The User EXEC and Privileged EXEC levels
• The port-specific parts of the CONFIG level
• All interface configuration levels
• Read Only level gives access to:
• The User EXEC and Privileged EXEC levels
3 - 10 December 2000