7-7
Catalyst 2950 Desktop Switch Software Configuration Guide
78-14982-01
Chapter 7 Adminis tering the Switch Prote cting Acces s to Privile ged EX EC Command s
To remove the password, use the no pas sword global co nfigurati on comm and.
This example shows how to set the Telnet password to let45me67in89:
Switch(config)# line vty 10
Switch(config-line)# password let45me67in89

Configuring Username and Password Pairs

You can configure username and password pairs, which are locally stored on the switch. These pairs are
assigned to lines or interfaces and authenticate each user before that user can access the switch. If you
have defined privilege levels, you can also assi gn a speci fic privilege level (with a ssociate d rights an d
privileges) to each usernam e and password pair.
Beginning in privileged EXEC mode, follow these steps to establish a username-based authentication
system that re quests a logi n usernam e and a password:
Step 7 show running-config Verify your e ntrie s.
The pas sword i s li ste d u nder t he c om mand line vty 0 15.
Step 8 copy running-config startup-config (Optiona l) Save your entries in the co nfigurati on file.
Command Purpose
Command Purpose
Step 1 configure terminal Enter globa l configurati on mode.
Step 2 username name [privilege level]
{password encryption-type password} Enter the username, privilege level, and password for each user.
•For name, specify the u ser ID as o ne wor d. Spac es an d quot at ion
marks are not allowed.
•(Optiona l) For level, specify the privilege level the user has after
gainin g access. The range is 0 to 1 5. Le v e l 15 giv es pr i vile ged EXEC
mode access. Level 1 gives user EXEC mode access.
•For encryption-type, enter 0 to specify that an unencrypted password
will follow. Enter 7 to specify that a hidden pa ssword will follow.
•For password, specify the p assword the user must enter to g ain access
to the switc h. The passwor d must be from 1 to 25 char acters , can
conta in embe dded sp aces, a nd mu st be the la st opt ion spec ifie d in t he
username command.
Step 3 line console 0
or
line vty 0 15
Enter li ne co nfigura tion m ode , a nd configure the con sole port ( lin e 0) or
the VTY lines (line 0 to 15).
Step 4 login local Enab le local p assw ord chec king at logi n time. Authe nticat io n is base d on
the username specified in Step 2.
Step 5 end Return to p rivileged EXEC mode.
Step 6 show running-config Verify your e ntrie s.
Step 7 copy running-config startup-config (Optiona l) Save your entries in the co nfigurati on file.