Cisco Systems ME3400G2CSA Protecting Access to Privileged EXEC Commands

7-2

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

78-17058-01

Chapter7 Configuring Switch-Based Authentication

Protecting Access to Privileged EXEC Commands

Protecting Access to Privileged EXEC Commands

A simple way of providing terminal access control in your network is to use p ass words a nd as sign

privilege levels. Password protection restricts access to a network or network device. Privilege levels

define what commands users can enter after they have logged into a network device.

Note For complete syntax and usage information for the commands used in this section, see the Cisco IOS

Security Command Reference, Release 12.2.

These sections contain this configuration information:

•Default Password and Privilege Level Configuration, page 7-2

•Setting or Changing a Static Enable Password, page 7-3

•Protecting Enable and Enable Secret Passwords with Encryption, pag e 7- 4

•Disabling Password Recovery, page 7-5

•Setting a Telnet Password for a Terminal Line, page 7-6

•Configuring Username and Password Pairs, page 7-7

•Configuring Multiple Privilege Levels, page 7-8

Table 7 -1 shows the default password and privilege level configuration.

Table7-1 Default Password and Privilege Levels

Feature Default Setting

Enable password and privilege level No password is defined. The default is level 15 (privileged EXEC level).

The password is not encrypted in the configuration file.

Enable secret password and privilege level No password is defined. The default is level 15 (privileged EXEC level).

The password is encrypted before it is written to the configuration file.

Line password No password is defined.