3-18
Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1 E
78-14099-04
Chapter 3 Configuring the Switch for the First Time
Protecting Access to Privileged EXEC Commands
For example, if you want many users to have access to the clear line command, you can assign it level 2
security and distribute the level 2 password widely. If you want more restricted access to the configure
command, you can assign it level 3 security and distribute that password to more restricted users.
These tasks describe how to configure additional levels of security:
• Setting the Privilege Level for a Command, page 3-18
• Changing the Default Privilege Level for Lines, page 3-18
• Logging In to a Privilege Level, page 3-18
• Exiting a Privilege Level, page 3-19
• Displaying the Password, Access Level, and Privilege Level Configuration, page 3-19
Setting the Privilege Level for a Command
To set the privilege level for a command, perform this task:
To display the password or access level configuration, see the “Displaying the Password, Access Level,
and Privilege Level Configuration” section on page 3-19.
Changing the Default Privilege Level for Lines
To change the default privilege level for a given line or a group of lines, perform this task:
To display the password or access level configuration, see the “Displaying the Password, Access Level,
and Privilege Level Configuration” section on page 3-19.
Logging In to a Privilege Level
To log in at a specified privilege level, perform this task:
Command Purpose
Step 1 Router(config)# privilege mode level level
command
Sets the privilege level for a command.
Step 2 Router(config)# enable password level level
[encryption-type] password
Specifies the enable password for a privilege level.
Command Purpose
Router(config-line)# privilege level level Changes the default privilege level for the line.
Command Purpose
Router# enable level Logs into a specified privilege level.