Reference Guide

Security | 789
To view the configuration, use the show running-config command in the EXEC Privilege mode.
Figure 40-2 is an example of a configuration to allow a user “john” to view only the EXEC mode
commands and all
snmp-server commands. Since the snmp-server commands are “enable” level
commands and, by default, found in the CONFIGURATION mode, you must also assign the launch
command for the CONFIGURATION mode,
configure, to the same privilege level as the snmp-server
commands.
Figure 40-2. Configuring a Custom Privilege Level
Figure 40-3 is a screen shot of the Telnet session for user “john”. The show privilege command output
confirms that “john” is in privilege level 8. In the EXEC Privilege mode, “john” can access only the
commands listed. In CONFIGURATION mode, “john” can access only the
snmp-server commands.
3 privilege mode {level level
command | reset command}
CONFIGURATION Configure level and commands for a mode or
reset a command’s level. Configure the
following required and optional parameters:
• mode: Enter a keyword for the modes (exec,
configure, interface, line, route-map, router)
• level level range: 0 to 15. Levels 0, 1 and 15
are pre-configured. Levels 2 to 14 are
available for custom configuration.
• command: A FTOS CLI keyword (up to 5
keywords allowed).
• reset: Return the command to its default
privilege mode.
Step Command Syntax Command Mode Purpose
FTOS(conf)#username john privilege 8 password john
FTOS(conf)#enable password level 8 notjohn
FTOS(conf)#privilege exec level 8 configure
FTOS(conf)#privilege config level 8 snmp-server
FTOS(conf)#end
FTOS#show running-config
Current Configuration ...
!
hostname FTOS
!
enable password level 8 notjohn
enable password force10
!
username admin password 0 admin
username john password 0 john privilege 8
!
The user john is assigned privilege level
8 and assigned a password.
All other users are assigned a password
to access privilege level 8
The command configure is assigned to
privilege level 8 since it is needed to
reach the CONFIGURATION mode
where the snmp-server commands are
located.
The snmp-server commands, in the
CONFIGURATION mode, are assigned
to privilege level 8.