Administrator Guide

Allowing Access to INTERFACE, LINE, ROUTE-MAP, and ROUTER Mode

1. Similar to allowing access to CONFIGURATION mode, to allow access to INTERFACE, LINE, ROUTE-MAP, and ROUTER

modes, rst allow access to the command that enters you into the mode. For example, allow a user to enter INTERFACE mode

using the privilege configure level level interface gigabitethernet command.

2. Then, individually identify the INTERFACE, LINE, ROUTE-MAP or ROUTER commands to which you want to allow access

using the privilege {interface | line | route-map | router} level level command. In the command,

specify the privilege level of the user or terminal line and specify all keywords in the command to which you want to allow

access.

Customizing a Privilege Level

to customize a privilege level, use the following commands.

1. Remove a command from the list of available commands in EXEC mode.

CONFIGURATION mode

privilege exec level level {command ||...|| command}

2. Move a command from EXEC Privilege to EXEC mode.

CONFIGURATION mode

privilege exec level level {command ||...|| command}

3. Allow access to CONFIGURATION mode.

CONFIGURATION mode

privilege exec configure level level

4. Allow access to INTERFACE, LINE, ROUTE-MAP, and/or ROUTER mode. Specify all keywords in the command.

CONFIGURATION mode

privilege configure level level {interface | line | route-map | router} {command-keyword

||...|| command-keyword}

5. Allow access to a CONFIGURATION, INTERFACE, LINE, ROUTE-MAP, and/or ROUTER mode command.

CONFIGURATION mode

privilege {configure |interface | line | route-map | router} level level {command

||...|| command}

Create a Custom Privilege Level Apply a Privilege Level to a Username

The following conguration privilege level 3. This level:

• removes the resequence command from EXEC mode by requiring a minimum of privilege level 4

• moves the capture bgp-pdu max-buffer-size command from EXEC Privilege to EXEC mode by requiring a minimum

privilege level 3, which is the congured level for VTY 0

• allows access to CONFIGURATION mode with the banner command

• allows access to INTERFACE and LINE modes with the no command

Dell(conf)#do show run privilege

Dell(conf)#privilege exec level 3 capture

Dell(conf)#privilege exec level 3 configure

Dell(conf)#privilege exec level 4 resequence

Dell(conf)#privilege exec level 3 clear arp-cache

Dell(conf)#privilege exec level 3 clear arp-cache max-buffer-size

Dell(conf)#privilege configure level 3 line

Dell(conf)#privilege configure level 3 interface

Dell(conf)#do telnet 10.11.80.201

[telnet output omitted]

Dell#show priv

Management