Reference Guide

Switch Management | 67
Allowing Access to INTERFACE, LINE, ROUTE-MAP, and
ROUTER modes
1. Similar to allowing access to CONFIGURATION mode, to allow access to INTERFACE, LINE,
ROUTE-MAP, and ROUTER modes, you must first allow access to the command that enters you into
the mode. For example, allow a user to enter INTERFACE mode using the command
privilege configure
level level interface
tengigabitethernet command.
2. Then, individually identify the INTERFACE, LINE, ROUTE-MAP or ROUTER commands to which
you want to allow access using the command
privilege {interface | line | route-map | router} level level. In
the command, specify the privilege level of the user or terminal line, and specify all keywords in the
command to which you want to allow access.
The following table lists the configuration tasks you can use to customize a privilege level:
The configuration in Figure 4-1 creates privilege level 3. This level:
removes the
resequence command from EXEC mode by requiring a minimum of privilege level 4
moves the command
capture bgp-pdu max-buffer-size from EXEC Privilege to EXEC mode by requiring
a minimum privilege level 3, which is the configured level for VTY 0
allows access to CONFIGURATION mode with the
banner command
allows access to INTERFACE and LINE modes are allowed with no command
Task Command Syntax Command Mode
Remove a command from the list of available commands
in EXEC mode.
privilege exec level level
{command ||...|| command}
CONFIGURATION
Move a command from EXEC Privilege to EXEC mode. privilege exec level level
{command ||...|| command}
CONFIGURATION
Allow access to CONFIGURATION mode. privilege exec level level
CONFIGURATION
Allow access to INTERFACE, LINE, ROUTE-MAP,
and/or ROUTER mode. Specify all keywords in the
command.
privilege configure level level
{interface | line | route-map |
router} {command-keyword ||...||
command-keyword}
CONFIGURATION
Allow access to a CONFIGURATION, INTERFACE,
LINE, ROUTE-MAP, and/or ROUTER mode command.
privilege {configure | interface | line
| route-map | router} level level
{command ||...|| command}
CONFIGURATION