Cisco Systems RJ-45-to-AUX manual Setting the Login Passwords, Setting Privilege Levels

Setting the Login Passwords

By default, Cisco switches have no passwords configured when they are shipped. On the Cisco IOS−based switches, different priority levels of authority are available for console access. You can define two levels on IOS−based switches: privilege level 1, which is equivalent to User EXEC mode; and privilege level 15, which is equivalent to Privileged EXEC mode. Use the following commands to set the two levels’ passwords (the password for level 1 will be noaccess, and the password for level 15 will be noone):

Switch> enable

Switch# Configure terminal

Switch (config) enable password level 1 noaccess

Switch (config) enable password level 15 noone

Related solutions:	Found on page:
Creating a Standard Access List	402
Creating an Extended Access List	403
Enabling Port Security	411

Setting Privilege Levels

Using the privilege level command allows you to assign a better−defined set of commands for a selected user. Let’s walk through how to do this:

1.Select a user and associate that user with a privilege level. In this example I will use myself and the login name SeanO. I’ll assign myself a privilege level of 3. To do this, use the following command in Global Configuration Mode:

5000RSM(config)# privilege configure level 3 seano 5000RSM(config)#

2.You should assign an enable password for each configured privilege level. To assign the password a privilege level of 3, use the following command:

5000RSM(config)# enable secret level 3 sean1

3. To get into the switch, I will now use the following command:

5000RSM(config)# username seano password sean1

Assigning Allowable Commands

To allow a user to use only certain show commands, but give him no access to debug or configuration commands, use the following command:

5000RSM(config)# privilege exec level 3 show 5000RSM(config)#

To allow users with privilege level 3 a specific command syntax for debug, such as debug ip, use the following command:

5000RSM1(config)# privilege exec level 3 debug ip 5000RSM1(config)#

Note Privilege level 0 includes five commands: disable, enable, exit, help, and logout.

Setting the Console Port Time−out Value

To configure a time−out value for IOS−based Cisco switches, use the following command:

CAT2924XL(config)# line console

CAT2924XL(config)# time−out 300

40