CLI Reference Guide-R04

Chapter 8 | User Authentication Commands
User Accounts and Privilege Levels
– 230 –
User Accounts and Privilege Levels
The basic commands required for management access and assigning command
privilege levels are listed in this section. This switch also includes other options for
password checking via the console or a Telnet connection (page 139), user
authentication via a remote authentication server (page 229), and host access
authentication for specific ports (page 274).
enable password After initially logging onto the system, you should set the Privileged Exec password.
Remember to record it in a safe place. This command controls access to the
Privileged Exec level from the Normal Exec level. Use the no form to reset the
default password.
Syntax
enable password [level level] {0 | 7} password
no enable password [level level]
level level - Sets the command access privileges. (Range: 0-15)
Level 0, 8 and 15 are designed for users (guest), managers (network
maintenance), and administrators (top-level access). The other levels can
be used to configured specialized access profiles.
Level 0-7 provide the same default access privileges, all within Normal
Exec mode under the “Console>” command prompt.
Level 8-14 provide the same default access privileges, including
additional commands in Normal Exec mode, and a subset of commands
in Privileged Exec mode under the “Console#” command prompt.
Level 15 provides full access to all commands.
The privilege level associated with any command can be changed using
the privilege command.
{0 | 7} - 0 means plain password, 7 means encrypted password.
password - Password for this privilege level. (Maximum length:
32 characters plain text or encrypted, case sensitive)
Table 37: User Access Commands
Command Function Mode
enable password Sets a password to control access to the Privileged Exec
level
GC
username Establishes a user name-based authentication system at
login
GC
privilege Assigns a privilege level to specified command groups or
individual commands
GC
show privilege Shows the privilege level for the current user, or the
privilege level for commands modified by the privilege
command
PE