Arris C4C - Page 1111

Chapter 45: CLI Overview
STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved. 1111
configuration options. You would create a separate privilege level for those specific interface configuration commands and
distribute the password for that level to those users. Or, if you had a group of trainees, you could assign passwords to
certain privilege levels, and give them these passwords only when they had completed their training.
To create a new privilege level, password, and associate commands with that privilege level, use the following example
beginning in global configuration mode:
1. Enter enable mode:
enable
2. Create the password and set the privilege level required to use the password in order to access privileged commands:
configure enable password <password> privilege <1-15>
Where password is a string up to 16 characters long and privilege is a number 1-15. If you select level 7, for
example, then levels 1-7 are all required to use the password to access privileged commands.
Example
To restrict access to the show ip interface command, for example, you need to set a password for the desired privilege
level and assign that level to the command. In the example that follows, the password Password7 is given to privilege level
7; privilege level 7 is assigned to the show ip interface command.
configure enable password Password7 privilege 7
configure privilege exec level 7 show ip interface
To confirm the previous command:
show privilege exec show ip interface
To enter privilege level 7, enter the following command. The CMTS will prompt you for a password:
enable 7
Password:
Current privilege level for 'show ip route' is 4
Use show users to display the privilege level of defined users.
1. To set the authentication method to the local list of users and passwords:
configure authentication testlist1 local
Where testlist1 is an example of a name for this method list
2. Configure the telnet and console access to use the authentication method above for enable access:
configure line vty 0 6 authentication testlist1 enable-authentication