MNL-0641-01 Rev A3
ECO-4823
Effective: 04 Oct 16
Page 95 of 107
M
ANAGING
U
SERS
This section describes local user management on the device. RADIUS and user management
is beyond the scope of this document.
It is possible to create several user accounts on a system. Each user account has a set of configurable
attributes:
User name
Password
Privilege level
All attributes are configured with the same command, ‘username’.
username <username> privilege <level> password { unencrypted | encrypted } <password>
username <username> privilege <level> password none
no username <username>
‘password none’ is used when no password is desired; the security implications of using this should be
considered carefully.
‘no username’ deletes the given user account.
Example: Adding, Modifying and Deleting Users
The following example adds two user accounts at different privilege levels, inspects the configuration, and
deletes one account using ‘no username’.
! Display current set of local user accounts:
SWI2210-XXXX# show running-config | include username
username admin privilege 15 password encrypted dmVyeS1zZWNyZXQ=
! Add two accounts, ‘operator’ and ‘monitor’. The passwords are supplied in
! unencrypted form:
SWI2210-XXXX# configure terminal
SWI2210-XXXX(config)# username operator privilege 10 password unencrypted a-secret
SWI2210-XXXX(config)# username monitor privilege 1 password unencrypted new-secret
! Verify that the configuration is correct (shows 3 usernames) . Note that passwords
! are displayed in encrypted form:
SWI2210-XXXX(config)# do show running-config | include username
username admin privilege 15 password encrypted dmVyeS1zZWNyZXQ=
username operator privilege 10 password encrypted YS1zZWNyZXQ=
username monitor privilege 1 password encrypted YW5vdGhlci1zZWNyZXQ=
! Delete the ‘operator’ user and verify it is removed from the configuration:
SWI2210-XXXX(config)# no username operator
SWI2210-XXXX(config)# do show running-config | include username
username admin privilege 15 password encrypted dmVyeS1zZWNyZXQ=
username monitor privilege 1 password encrypted YW5vdGhlci1zZWNyZXQ=