Enterasys X-Pedition XSR, Справочное руководство CLI

Страница: 24 / 684

General Network Management Commands
1-10 Network Management
Mode
Global configuration: XSR(config)#
Defaults
• Privilege level 0: all statistics ( show ) commands with low ‐ level security such as show version ,
show clock , etc.
• Privilege levels 1 through 9 ‐ the following EXEC Mode commands are available: disable,
exit, help, isdn, ping, telnet, terminal , and traceroute . Unless explicitly defined,
users having privilege levels 1 ‐ 9 have no access to Privileged EXEC commands.
• Privilege levels 10 through 14 ‐ the following Privileged EXEC mode commands are available:
cd, clear, clock, dir, disable, enable, exit, help, isdn, no, ping, pwd,
reload, telnet, terminal, traceroute
, and
verify
. Unless explicitly defined, only level
15 users can access Global Mode commands.
• Privilege level 10: all statistics (
show
) commands with higher level security such as
show
running-config, show interface
, etc.
• Privilege level 15: other configuration commands such as
configure, copy, delete,
rename, write .
Only an admin can issue these commands.
• Any user privilege level automatically inherits all privileges granted to lower privilege levels.
• Admin privilege level (15) cannot be changed.
• Privilege for special user admin : 15
• Only administrators can add, delete, or change user rights.
• Only administrators can change privilege levels for commands.
• Users can change their own passwords but not their privilege levels.
Examples
This example sets the privilege level for the
username
command in Global mode to level 6:
XSR(config)#privilege configure level 6 username
This example resets the privilege level for the username command in Global mode to the default:
XSR(config)#privilege configure reset username
This example sets the privilege level for the
neighbor
command in Router RIP mode to level 13:
XSR(config)#privilege router-rip level 13 neighbor
value
Privilege level associated with the mode of operation ranging from 0 to
15 (highest).
reset
Resets the privilege level to the default.
command
Command within that mode to set a privilege for.
commandgroup
Set of commands to associate with a privilege. For example, T1
Controller group commands.