Configuration Guide User guide

FastIron Configuration Guide 127
53-1002494-02
Passwords used to secure access
Syntax: [no] privilege <cli-level> level <privilege-level> <command-string>
The <cli-level> parameter specifies the CLI level and can be one of the following values:
• exec – EXEC level; for example, Brocade> or Brocade#
• configure – CONFIG level; for example, Brocade(config)#
• interface – Interface level; for example, Brocade(config-if-6)#
• loopback-interface – loopback interface level
• virtual-interface – Virtual-interface level; for example, Brocade(config-vif-6)#
• dot1x – 802.1X configuration level
• ipv6-access-list – IPv6 access list configuration level
• rip-router – RIP router level; for example, Brocade(config-rip-router)#
• ospf-router – OSPF router level; for example, Brocade(config-ospf-router)#
• dvmrp-router – DVMRP router level; for example, Brocade(config-dvmrp-router)#
• pim-router – PIM router level; for example, Brocade(config-pim-router)#
• bgp-router – BGP4 router level; for example, Brocade(config-bgp-router)#
• vrrp-router – VRRP configuration level
• gvrp – GVRP configuration level
• trunk – trunk configuration level
• port-vlan – Port-based VLAN level; for example, Brocade(config-vlan)#
• protocol-vlan – Protocol-based VLAN level
The <privilege-level> indicates the number of the management privilege level you are augmenting.
You can specify one of the following:
• 0 – Super User level (full read-write access)
• 4 – Port Configuration level
• 5 – Read Only level
The <command-string> parameter specifies the command you are allowing users with the
specified privilege level to enter. To display a list of the commands at a CLI level, enter “?” at that
level's command prompt.
Recovering from a lost password
Recovery from a lost password requires direct access to the serial port and a system reset.
NOTE
You can perform this procedure only from the CLI.
Follow the steps given below to recover from a lost password.
1. Start a CLI session over the serial interface to the device.
2. Reboot the device.
3. At the initial boot prompt at system startup, enter b to enter the boot monitor mode.
4. Enter no password at the prompt. (You cannot abbreviate this command.) This command will
cause the device to bypass the system password check.