Configuring a Telnet Session Time−Out Value
To lower the chances for vulnerability when an administrator walks away from a logged−in Telnet session,
you can configure and apply a time−out condition to unused VTY sessions. Here’s how:
HSNRSM (config)# line vty 0 4
HSNRSM (config−line)# exec−timeout 5 0
We just set the timeout value to five minutes and zero seconds.
Related solution: Found on page:
Configuring Telnet 67
Implementing Privilege Levels on a 1900EN
To assign a user a privilege level and a defined set of commands you first need to select a user and associate
that user with a privilege level. To do this, use the following command in Global Configuration mode:
1900EN(config)# privilege configure level 3 password
You should assign a password for each configured privilege level. To assign the password brad1 to privilege
level 3, use the following command:
1900EN (config)# enable secret level 3 brad1
When Brad wants to log in to the switch, he will use the following command:
1900EN (config)# username blarson password brad1
This setup allows the user blarson to use certain show commands by default, but gives him no access to the
debug or configuration commands.
To allow the user to use all the debug commands in privilege level 3, use the following command:
1900EN (config)# privilege exec level 3 debug
To allow users with a privilege level 3 to use only a certain command syntax for debug, such as debug ip, use
the following command:
1900EN (config)# privilege exec level 3 debug ip
Note Privilege level 0 includes five commands associated with the privilege level: disable, enable, exit, help,
and logout.
Configuring Line Console Time−Out Values
To configure a time−out value, use the following command. The time−out value is being set to five minutes,
measured in seconds:
hsn(config)# line console
hsn(config)# time−out 300
Tip You can use the lock command to lock an unused Telnet session. After you issue the lock
command, the system will ask you to enter and verify an unlocking password.
To configure a Set/Clear command−based switch with a time−out value of five minutes, use the following
command:
hsn# set logout 5
267