Configuring Multiple Privilege Levels; Setting The Privilege Level For A Command - Cisco Catalyst 2950 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2950:
- Configuration manual (710 pages) ,
- Command reference manual (686 pages) ,
- Software configuration manual (674 pages)
Table of Contents
Advertisement
Chapter 7
Administering the Switch
To disable username authentication for a specific user, use the no username name global configuration
command. To disable password checking and allow connections without a password, use the no login
line configuration command.
Configuring Multiple Privilege Levels
By default, the IOS software has two modes of password security: user EXEC and privileged EXEC. You
can configure up to 16 hierarchical levels of commands for each mode. By configuring multiple
passwords, you can allow different sets of users to have access to specified commands.
For example, if you want many users to have access to the clear line command, you can assign it
level 2 security and distribute the level 2 password fairly widely. But if you want more restricted access
to the configure command, you can assign it level 3 security and distribute that password to a more
restricted group of users.
This section includes this configuration information:
•
•
•
Setting the Privilege Level for a Command
Beginning in privileged EXEC mode, follow these steps to set the privilege level for a command mode:
Command
Step 1
configure terminal
Step 2
privilege mode level level command
Step 3
enable password level level password
Step 4
end
78-11380-04
Setting the Privilege Level for a Command, page 7-7
Changing the Default Privilege Level for Lines, page 7-8
Logging into and Exiting a Privilege Level, page 7-9
Purpose
Enter global configuration mode.
Set the privilege level for a command.
Specify the enable password for the privilege level.
Return to privileged EXEC mode.
For mode, enter configure for global configuration mode, exec for
•
EXEC mode, interface for interface configuration mode, or line for
line configuration mode.
•
For level, the range is from 0 to 15. Level 1 is for normal user EXEC
mode privileges. Level 15 is the level of access permitted by the
enable password.
•
For command, specify the command to which you want to restrict
access.
•
For level, the range is from 0 to 15. Level 1 is for normal user EXEC
mode privileges.
•
For password, specify a string from 1 to 25 alphanumeric characters.
The string cannot start with a number, is case sensitive, and allows
spaces but ignores leading spaces. By default, no password is
defined.
Catalyst 2950 Desktop Switch Software Configuration Guide
Protecting Access to Privileged EXEC Commands
7-7
Advertisement
Table of Contents
Troubleshooting
