14
When you configure the
undo
command-privilege
command, the value of the
command
argument can be an abbreviated form of the specified command. You
only need to enter the keywords at the beginning of the command. For example,
after the
undo command-privilege view
system ftp command is executed, all
commands starting with the keyword
ftp
(such as
ftp server acl
,
ftp server enable
,
and
ftp timeout
) are restored to the default level. If you have modified the
command level of commands
ftp server enable
and
ftp timeout
, and you want to
restore only the
ftp server enable
command to its default level, use the
undo
command-privilege view
system ftp server command.
If you modify the command level of a command in a specified view from the
default command level to a lower level, remember to modify the command levels
of the
quit
command and the corresponding command that is used to enter this
view. For example, the default command level of commands
interface
and
system-view
is 2 (system level). If you want to make the
interface
command
available to users with the user privilege level of 1, you must execute the following
three commands:
command-privilege level
1
view
shell system-view,
command-
privilege level
1
view
system interface ethernet 1/1, and
command-privilege level
1
view
system quit, so that the login users with the user privilege level of 1 can enter
system view, execute the
interface ethernet
command, and then return to user
view.
Examples
Set the command level of the
system-view
command in user view to 3.
By default, users with the user privilege level of 2 or 3 can use the
system-view
command after logging in. After the below configuration, only users with the user
privilege level of 3 can use this command to enter system view and configure the
device. This improves device security.
<Sysname> system-view
[Sysname] command-privilege level 3 view shell system-view
display command-alias
Syntax
display command-alias
View
Any view
Default Level
1: Monitor level
