Comnet CNGE11FX3TX8MS, Инструкция по установке и эксплуатации

Страница: 272 / 314

INS_CNGE11FX3TX8MS[POE][HO] Rev. 11.6.17 PAGE 272
INSTRUCTION MANUAL CNGE11FX3TX8MS[POE][HO]
TECH SUPPORT: 1.888.678.9427
Understanding Privilege Levels
A privilege level is a number in the range of 0 to 15, inclusive, with 0 being the lowest. It is
assigned to a user session and used to determine access to ICLI commands. Only commands at
the same or lower privilege level can be accessed.
Each user on the device has a default privilege level that is copied to the session’s privilege level
at login. It is, however, possible for the user to change the session privilege level by executing the
enable or disable commands. This can be used, for example, as follows:
»
The user account is configured with privilege level 0
» Whenever the user needs to perform higher-privileged commands, the user changes session
priority level, executes the necessary commands, and then reverts back to the default priority
level
Access to higher priority levels must be password protected by using the enable password or
enable secret global configuration commands. The main difference between the two is whether
passwords are displayed in clear text or encrypted form in running-config, and consequently,
startup-config.
Password input can also be in encrypted or clear text form. The latter is used when an operator
inputs a new password, as the operator will usually not know the encrypted form of the password.
The admin user is at level 15 by default, the highest possible privilege level.