Filter
Top Products
Security | 921
By default, commands in FTOS are assigned to different privilege levels. You can access those commands
only if you have access to that privilege level. For example, to reach the
protocol spanning-tree command,
you must log in to the router, enter the
enable command for privilege level 15 (this is the default level for
the command) and then enter the CONFIGURATION mode.
You can configure passwords to control access to the box and assign different privilege levels to users.
FTOS supports the use of passwords when you log in to the system and when you enter the
enable
command. If you move between privilege levels, you are prompted for a password if you move to a higher
privilege level.
Configuration Task List for Privilege Levels
The following list has the configuration tasks for privilege levels and passwords.
• Configure a username and password on page 921 (mandatory)
• Configure the enable password command on page 922 (mandatory)
• Configure custom privilege levels on page 922 (mandatory)
• Specify LINE mode password and privilege on page 924 (optional)
• Enable and disabling privilege levels on page 925 (optional)
For a complete listing of all commands related to FTOS privilege levels and passwords, refer to the
Security chapter in the FTOS Command Reference.
Configure a username and password
In FTOS, you can assign a specific username to limit user access to the system.
To configure a username and password, use the following command in the CONFIGURATION mode:
To view usernames, use the
show users command in the EXEC Privilege mode.
Command Syntax Command Mode Purpose
username name [access-class
access-list-name] [nopassword | password
[
encryption-type] password] [privilege level]
CONFIGURATION Assign a user name and password. Configure the
optional and required parameters:
• name: Enter a text string up to 63 characters
long.
• access-class access-list-name: Enter the
name of a configured IP ACL.
• nopassword: Do not require the user to
enter a password.
• encryption-type: Enter 0 for plain text or 7
for encrypted text.
• password: Enter a string.
• privilege level range: 0 to 15.