Juniper JUNOSE 11.3, Configuration Manual

Page: 88 / 632

host1# show config category management cli command-privileges
privilege configure level 7 snmp-server community
privilege configure all level 5 snmp-server
Removing the all Keyword
Using the no version or reset version removes the all keyword and restores default privilege
levels.
If the privilege setting of the mode or command for which you are restoring default
privilege levels takes precedence over any ineffective privilege settings, those settings
will automatically take effect according to the order of precedence (see “Using the Order
of Precedence” on page 56
).
The difference between the no version and the reset version is that the reset version
removes the configuration from the show configuration output. This is useful when you
want to remove a configuration that has been overridden and rendered ineffective by a
privilege level that takes precedence.
Setting Default Line Privilege
The factory default privilege level for the console line and all vty lines is 1. However, you
can use the
privilege level command in Line Configuration mode to set the default login
privilege for the console line or any number of vty lines.
To change the default privilege level:
1.
Access line configuration mode on the router for the console.
host1(config)# line console 0
host1(config-line)#
or on one or more vty lines
host1(config)# line vty 0 12
host1(config-line)#
NOTE: The latter command configures vty lines 0 to 12.
2.
Specify a starting privilege level for the line or lines.
host1(config-line)# privilege level 5
The default privilege level for the specified line (or lines) changes. The new values
take effect immediately for any new users. If using the console line, you must exit out
of the CLI and reestablish a connection before the default takes effect.
If you are validating through RADIUS or and the server specifies an enable
level, that enable level takes precedence over the line privilege level.
privilege level
•
Use to change the default privilege level of the console line or one or more vty lines.
•
Example
host1(config-line)# privilege level 5
Copyright © 2010, Juniper Networks, Inc. 58
JunosE 11.3.x System Basics Configuration Guide