304
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Administering the Wireless Device
Protecting Access to Privileged EXEC Commands
When you set a command to a privilege level, all commands whose syntax is a subset of that command
are also set to that level. For example, if you set the
show ip route
command to level 15, the
show
commands and
show ip
commands are automatically set to privilege level 15 unless you set them
individually to different levels.
To return to the default privilege for a given command, use the
no privilege
mode
level
level
command
command in global configuration mode.
The following example shows how to set the
configure
command to privilege level 14 and how to define
SecretPswd14
as the password users must enter to use level 14 commands:
AP(config)#
privilege exec level 14 configure
AP(config)#
enable password level 14 SecretPswd14
Logging Into and Exiting a Privilege Level
To log in to a specified privilege level or to exit to a specified privilege level, follow these steps, beginning
in privileged EXEC mode.
SUMMARY STEPS
1.
enable
level
2.
disable
level
DETAILED STEPS
Step 5
show running-config
or
show privilege
Verifies your entries.
The
show running-config
command displays the password and access
level configuration.
The
show privilege
command displays the privilege level configuration.
Step 6
copy running-config startup-config
(Optional) Saves your entries in the configuration file.
Command
Purpose
Command
Purpose
Step 1
enable
level
Logs in to a specified privilege level.
For
level
, the range is 0 to 15.
Step 2
disable
level
Exits to a specified privilege level.
For
level
, the range is 0 to 15.
