White Papers

Moving a Command from EXEC Privilege Mode to EXEC Mode
Remove a command from the list of available commands in EXEC mode for a specific privilege level using the privilege
exec command from CONFIGURATION mode. In the command, specify a level greater than the level given to a user or terminal
line, then the first keyword of each restricted command.
Moving a Command from EXEC Privilege Mode to EXEC Mode
Move a command from EXEC Privilege to EXEC mode for a privilege level using the privilege exec command from
CONFIGURATION mode. In the command, specify the privilege level of the user or terminal line, and specify all keywords in the
command to which you want to allow access.
Allowing Access to CONFIGURATION Mode Commands
Allow access to CONFIGURATION mode using the privilege exec level level command configure from
CONFIGURATION mode. A user that enters CONFIGURATION mode remains at his privilege level, and has access to only two
commands, end and exit. Individually specify each CONFIGURATION mode command to which you want to allow access using
the privilege configure level level command. In the command, specify the privilege level of the user or terminal
line, and specify all keywords in the command to which you want to allow access.
Allowing Access to INTERFACE, LINE, ROUTE-MAP, and ROUTER Mode
1. Similar to allowing access to CONFIGURATION mode, to allow access to INTERFACE, LINE, ROUTE-MAP, and ROUTER
modes, first allow access to the command that enters you into the mode. For example, allow a user to enter INTERFACE
mode using the privilege configure level level interface gigabitethernet command.
2. Then, individually identify the INTERFACE, LINE, ROUTE-MAP or ROUTER commands to which you want to allow access
using the privilege {interface | line | route-map | router} level level command. In the command,
specify the privilege level of the user or terminal line and specify all keywords in the command to which you want to allow
access.
Customizing a Privilege Level
to customize a privilege level, use the following commands.
1. Remove a command from the list of available commands in EXEC mode.
CONFIGURATION mode
privilege exec level level {command ||...|| command}
2. Move a command from EXEC Privilege to EXEC mode.
CONFIGURATION mode
privilege exec level level {command ||...|| command}
3. Allow access to CONFIGURATION mode.
CONFIGURATION mode
privilege exec configure level level
4. Allow access to INTERFACE, LINE, ROUTE-MAP, and/or ROUTER mode. Specify all keywords in the command.
CONFIGURATION mode
privilege configure level level {interface | line | route-map | router} {command-keyword
||...|| command-keyword}
5. Allow access to a CONFIGURATION, INTERFACE, LINE, ROUTE-MAP, and/or ROUTER mode command.
CONFIGURATION mode
privilege {configure |interface | line | route-map | router} level level {command ||...||
command}
The following configuration privilege level 3. This level:
● removes the resequence command from EXEC mode by requiring a minimum of privilege level 4
Management
63