Tiesse Imola 0220, Руководство пользователя

Страница: 29 / 376

Accessing IMOLA
U
SER
G
UIDE
29
The level of privilege is established by the Authentication server used (RADIUS or ). In the
first case it is necessary to configure a Custom attribute in the server (described in the RADIUS
section).
In the fault configuration there are 3 levels:

Level 0 . The available commands are
enable , exit
and
quit

Level 1 . The available commands are those related to a Login user, that is only reading
commands without possibility of modifying the configuration
 Level 15 . The available commands are those related to an Administrative user. This means
that (potentially) all the commands are available.
 The N level has all the privileges of lower levels, in order to pass from a level to another it is
necessary to know the password associated to that level.
The command:
set privilege level N <command prefix>
if executed by an authorized user, establishes that at N level all the commands starting with the
specified prefix can be executed. For example, by using:
set privilege level 3 set adsl
it is specified that users which have received a 3 level of privilege, can execute all the configuration
commands of the ADSL interface.
In order to eliminate the privileges previously set the command is:
set no-privilege level N <command prefix>
In order to check the current level of privilege the command is:
show privilege
In order to pass from a lower to a higher level a password should be associated with the higher
level.
The command which allows to associate the password with a certain level is:
set enable password level N
In an interactive modality it asks to enter the password. In order to eliminate the password the
command is:
set no-enable password level N
By this way the N level becomes inaccessible from lower levels.
In order to access a higher level the command is:
enable N
It asks to enter the password associated with the N level. If the password is correctly set, the user
can use all the commands associated with the N level.
For example, if a superuser has set the following commands in the router:
set privilege level 3 set eth1
set privilege level 3 set gprs
set enable password level 3