Cisco Systems RJ-45-to-AUX manual Configuring a Telnet Session Time−Out Value, 267

Configuring a Telnet Session Time−Out Value

To lower the chances for vulnerability when an administrator walks away from a logged−in Telnet session, you can configure and apply a time−out condition to unused VTY sessions. Here’s how:

HSNRSM (config)# line vty 0 4

HSNRSM (config−line)# exec−timeout 5 0

We just set the timeout value to five minutes and zero seconds.

Related solution:	Found on page:
Configuring Telnet	67

Implementing Privilege Levels on a 1900EN

To assign a user a privilege level and a defined set of commands you first need to select a user and associate that user with a privilege level. To do this, use the following command in Global Configuration mode:

1900EN(config)# privilege configure level 3 password

You should assign a password for each configured privilege level. To assign the password brad1 to privilege level 3, use the following command:

1900EN (config)# enable secret level 3 brad1

When Brad wants to log in to the switch, he will use the following command:

1900EN (config)# username blarson password brad1

This setup allows the user blarson to use certain show commands by default, but gives him no access to the debug or configuration commands.

To allow the user to use all the debug commands in privilege level 3, use the following command:

1900EN (config)# privilege exec level 3 debug

To allow users with a privilege level 3 to use only a certain command syntax for debug, such as debug ip, use the following command:

1900EN (config)# privilege exec level 3 debug ip

Note Privilege level 0 includes five commands associated with the privilege level: disable, enable, exit, help, and logout.

Configuring Line Console Time−Out Values

To configure a time−out value, use the following command. The time−out value is being set to five minutes, measured in seconds:

hsn(config)# line console hsn(config)# time−out 300

Tip You can use the lock command to lock an unused Telnet session. After you issue the lock command, the system will ask you to enter and verify an unlocking password.

To configure a Set/Clear command−based switch with a time−out value of five minutes, use the following command:

hsn# set logout 5

267