Chapter 9 Configuring Switch-Based Authentication

Protecting Access to Privileged EXEC Commands

Changing the Default Privilege Level for Lines

Beginning in privileged EXEC mode, follow these steps to change the default privilege level for a line:

 

Command

Purpose

Step 1

 

 

configure terminal

Enter global configuration mode.

Step 2

 

 

line vty line

Select the virtual terminal line on which to restrict access.

Step 3

 

 

privilege level level

Change the default privilege level for the line.

 

 

For level, the range is from 0 to 15. Level 1 is for normal user EXEC mode

 

 

privileges. Level 15 is the level of access permitted by the enable

 

 

password.

Step 4

 

 

end

Return to privileged EXEC mode.

Step 5

 

 

show running-config

Verify your entries.

 

or

The first command shows the password and access level configuration.

 

show privilege

The second command shows the privilege level configuration.

 

 

Step 6

 

 

copy running-config startup-config

(Optional) Save your entries in the configuration file.

 

 

 

Users can override the privilege level you set using the privilege level line configuration command by logging in to the line and enabling a different privilege level. They can lower the privilege level by using the disable command. If users know the password to a higher privilege level, they can use that password to enable the higher privilege level. You might specify a high level or privilege level for your console line to restrict line usage.

To return to the default line privilege level, use the no privilege level line configuration command.

Logging into and Exiting a Privilege Level

Beginning in privileged EXEC mode, follow these steps to log in to a specified privilege level and to exit to a specified privilege level:

Command

Step 1 enable level

Step 2 disable level

Purpose

Log in to a specified privilege level.

For level, the range is 0 to 15.

Exit to a specified privilege level.

For level, the range is 0 to 15.

Catalyst 3750-E and 3560-E Switch Software Configuration Guide

 

OL-9775-02

9-9

 

 

 

Page 211
Image 211
Cisco Systems 3750E Changing the Default Privilege Level for Lines, Logging into and Exiting a Privilege Level, Command