Authentication Commands

4-77

4

User Account and Privilege Level Commands

The basic commands required for management access are listed in this section.
This switch also includes other options for password checking via the console or a
Telnet connection (page 4-31), user authentication via a remote authentication
server (page 4-76), and host access authentication for specific ports (page 4-112).

username

This command adds named users, requires authentication at login, specifies or
changes a user's password (or specify that no password is required), or specifies or
changes a user's access level. Use the no form to remove a user name.
Syntax
username name {access-level level | nopassword |
password {0|7}password}
no username name
•name - The name of the user.
(Maximum length: 8 characters, case sensitive. Maximum users: 16)
•access-level level - Specifies the user level.
The device has three predefined privilege levels:
0:NormalExec,15: Privileged Exec.
•nopassword - No password is required for this user to log in.
•{0 | 7} - 0 means plain password, 7 means encrypted password.
•password password - The authentication password for the user.
(Maximum length: 8 characters plain text, 32 encrypted, case sensitive)
Default Setting
• The default access level is Normal Exec.
• The factory defaults for the user names and passwords are:
Table 4-26 User Access Commands
Command Function Mode Page
username Establishes a user name-based authentication system at login GC 4-77
enable password Sets a password to control access to the Privileged Exec level GC 4-78
privilege Assigns a privilege level to specified command groups or
individual commands
GC 4-79
privilege rerun Updates all privilege commands entered during the current
session to the running configuration file
PE 4-79
show privilege Shows the privilege level for the current user, or the privilege
level for commands modified by the privilege command
PE 4-80
Table 4-27 Default Login Settings
username access-level password
guest
admin
0
15
guest
admin