Cisco Systems DOC-7814982 Changing the Default Privilege Level for Lines

7-9
Catalyst 2950 Desktop Switch Software Configuration Guide
78-14982-01
Chapter 7 Adminis tering the Switch Prote cting Acces s to Privile ged EX EC Command s
When you set a command to a privilege level, all commands whose syntax is a subset of that command
are also set to that level. For example, if you set the show ip traffic comma nd to l evel 15, the show
comm ands and show ip commands are automatically set to privilege level 15 unless you set them
individually to different levels.
To return to the default privilege for a given command, use the no privilege mode level level command
global configurat ion comm and.
This example shows how to set the configure command to privilege level 14 and define SecretPswd14
as the password users mu st enter to use level 14 commands:
Switch(config)# privilege exec level 14 configure
Switch(config)# enable password level 14 SecretPswd14
Changing the Default Privilege Level for Lines
Beginning in privileged EXEC mode, follow these steps to change the defau lt privilege level for a line:
Users can override the privilege level you set using the privilege level l ine co nfiguration co mman d by
logging in to the line and enabling a dif fere nt pri vilege le v el. The y can lo wer the pri vile ge le vel b y using
the disable command. If users know the password to a higher pri vilege leve l, they can use that password
to enable the higher pr ivilege level. You might specify a high level or privilege level for your co nsole
line to restrict line usage.
To return to the default line privilege level, use the no privilege level li ne co nfiguration co mman d.
Step 5 show running-config
or
show privilege
Verify your e ntri es.
The first command displays the password and access level configuration.
The second command displ ays the privilege level configur ation.
Step 6 copy running-config startup-config (Optiona l) Save your entries in the co nfigurati on file.
Command Purpose
Command Purpose
Step 1 configure terminal Enter globa l configurati on mode.
Step 2 line vty line Select the virtual terminal line on which to restrict access.
Step 3 privilege level level Change the default privilege level for the lin e.
For level, the range is from 0 to 15. Level 1 is for normal user EXEC mode
privileges. Level 15 is the level of access permitted by the enable
password.
Step 4 end Return to p rivileged EXEC mode.
Step 5 show running-config
or
show privilege
Verify your e ntri es.
The first command displays the password and access level configuration.
The second command displ ays the privilege level configur ation.
Step 6 copy running-config startup-config (Optiona l) Save your entries in the co nfigurati on file.