Filter
Top Products
Security | 923
To assign commands and passwords to a custom privilege level, you must be in privilege level 15 and use
these commands in the following sequence in the CONFIGURATION mode:
To view the configuration, use the
show running-config command in the EXEC Privilege mode.
Figure 45-2 is an example of a configuration to allow a user “john” to view only the EXEC mode
commands and all
snmp-server commands. Since the snmp-server commands are “enable” level
commands and, by default, found in the CONFIGURATION mode, you must also assign the launch
command for the CONFIGURATION mode,
configure, to the same privilege level as the snmp-server
commands.
Step Command Syntax Command Mode Purpose
1
username name [access-class
access-list-name] [privilege level]
[
nopassword | password
[
encryption-type] password]
CONFIGURATION Assign a user name and password. Configure the
optional and required parameters:
•
name: Enter a text string (up to 63
characters).
•
access-class access-list-name: Enter the
name of a configured IP ACL.
•
privilege level range: 0 to 15.
• nopassword: Do not require the user to
enter a password.
• encryption-type: Enter 0 for plain text or 7 for
encrypted text.
•
password: Enter a string.
2
enable password [level level]
[encryption-mode] password
CONFIGURATION Configure a password for privilege level.
Configure the optional and required parameters:
• level level: Specify a level 0 to 15. Level 15
includes all levels.
• encryption-type: Enter 0 for plain text or 7 for
encrypted text.
• password: Enter a string up to 25 characters
long.
To change only the password for the enable
command, configure only the password
parameter.
3
privilege mode {level level command
| reset command}
CONFIGURATION Configure level and commands for a mode or
reset a command’s level. Configure the
following required and optional parameters:
• mode: Enter a keyword for the modes (exec,
configure, interface, line, route-map, router)
• level level range: 0 to 15. Levels 0, 1 and 15
are pre-configured. Levels 2 to 14 are
available for custom configuration.
• command: A FTOS CLI keyword (up to 5
keywords allowed).
• reset: Return the command to its default
privilege mode.