Cisco Systems 2950 Protecting Access to Privileged EXEC Commands

7-2
Catalyst2950 Desktop Switch Software Configuration Guide
78-11380-05
Chapter7 Administering the Switch
Protecting Access to Privileged EXEC Commands
•If you want to use username and password pairs, but you want to store t hem c e ntra lly o n a server
instead of locally, you can store them in a database on a security server. Multiple networking devices
can then use the same database to obtain user authentic atio n ( and , if n ece ssary, authorizatio n)
information. For more information, see the “Controlling Switch Access with TACA CS+” sectio n on
page 7-9.
Protecting Access to Privileged EXEC Commands
A simple way of providing terminal access control in your network is to use p ass words a nd as sign
privilege levels. Password protection restricts access to a network or network device. Privilege levels
define what commands users can enter after they have logged into a network device.
Note For complete syntax and usage information for the commands used in this section, refer to the Cisco IOS
Security Command Reference for Release 12.1.
This section describes how to control access to the configuration file and privileged EXEC com ma nds.
It contains this configuration information:
•Default Password and Privilege Level Configuration, page 7-2
•Setting or Changing a Static Enable Password, page 7-3
•Protecting Enable and Enable Secret Passwords with Encryption, pag e 7- 4
•Setting a Telnet Password for a Terminal Line, page 7-5
•Configuring Username and Password Pairs, page 7-6
•Configuring Multiple Privilege Levels, page 7-7
Default Password and Privilege Level Configuration
Table 7 -1 shows the default password and privilege level configuration.
Table7-1 Default Password and Privilege Levels
Feature Default Setting
Enable password and privilege level No password is defined. The default is level 15 (privileged EXEC level).
The password is not encrypted in the configuration file.
Enable secret password and privilege level No password is defined. The default is level 15 (privileged EXEC level).
The password is encrypted before it is written to the configuration file.
Line password No password is defined.