Chapter 8
| Authentication Commands
User Accounts and Privilege Levels
– 192 –
User Accounts and Privilege Levels
The basic commands required for management access and assigning
command privilege levels are listed in this section. This switch also includes
other options for password checking via the console or a Telnet connection
(
), user authentication via a remote authentication server (
and host access authentication for specific ports (
).
enable password
After initially logging onto the system, you should set the Privileged Exec
password. Remember to record it in a safe place. This command controls
access to the Privileged Exec level from the Normal Exec level. Use the
no
form to reset the default password.
Syntax
enable password
[
level
level
]
{
0
|
7
}
password
no enable password
[
level
level
]
level
level
- Sets the command access privileges. (Range: 0-15)
Level 0, 8 and 15 are designed for users (guest), managers
(network maintenance), and administrators (top-level access).
The other levels can be used to configured specialized access
profiles.
Level 0-7 provide the same default access privileges, all within
Normal Exec mode under the “Console>” command prompt.
Level 8-14 provide the same default access privileges, including
additional commands in Normal Exec mode, and a subset of
commands in Privileged Exec mode under the “Console#”
command prompt.
Level 15 provides full access to all commands.
The privilege level associated with any command can be changed
using the
{
0
|
7
} - 0 means plain password, 7 means encrypted password.
Table 35: User Access Commands
Command
Function
Mode
Sets a password to control access to the Privileged
Exec level
GC
Establishes a user name-based authentication system
at login
GC
Assigns a privilege level to specified command groups
or individual commands
GC
Shows the privilege level for the current user, or the
privilege level for commands modified by the privilege
command
PE
