ECS4110-28T_Management Guide

C HAPTER 24 | Authentication Commands
User Accounts and Privilege Levels
– 824 –
USER ACCOUNTS AND PRIVILEGE LEVELS
The basic commands required for management access and assigning
command privilege levels are listed in this section. This switch also includes
other options for password checking via the console or a Telnet connection
(page 748), user authentication via a remote authentication server
(page 823), and host access authentication for specific ports (page 862).
enable password After initially logging onto the system, you should set the Privileged Exec
password. Remember to record it in a safe place. This command controls
access to the Privileged Exec level from the Normal Exec level. Use the no
form to reset the default password.
SYNTAX
enable password [level level] {0 | 7} password
no enable password [level level]
level level - Sets the command access privileges. (Range: 0-15)
Level 0, 8 and 15 are designed for users (guest), managers
(network maintenance), and administrators (top-level access).
The other levels can be used to configured specialized access
profiles.
Level 0-7 provide the same default access privileges, all within
Normal Exec mode under the “Console>” command prompt.
Level 8-14 provide the same default access privileges, including
additional commands in Normal Exec mode, and a subset of
commands in Privileged Exec mode under the “Console#”
command prompt.
Level 15 provides full access to all commands.
The privilege level associated with any command can be changed
using the privilege command.
{0 | 7} - 0 means plain password, 7 means encrypted password.
password - Password for this privilege level. (Maximum length:
32 characters plain text or encrypted, case sensitive)
Table 76: User Access Commands
Command Function Mode
enable password Sets a password to control access to the Privileged
Exec level
GC
username Establishes a user name-based authentication system
at login
GC
privilege Assigns a privilege level to specified command groups
or individual commands
GC
show privilege Shows the privilege level for the current user, or the
privilege level for commands modified by the privilege
command
PE