Setting the Login Passwords
By default, Cisco switches have no passwords configured when they are shipped. On the Cisco IOS−based
switches, different priority levels of authority are available for console access. You can define two levels on
IOS−based switches: privilege level 1, which is equivalent to User EXEC mode; and privilege level 15, which
is equivalent to Privileged EXEC mode. Use the following commands to set the two levels’ passwords (the
password for level 1 will be noaccess, and the password for level 15 will be noone):
Switch> enable
Switch# Configure terminal
Switch (config) enable password level 1 noaccess
Switch (config) enable password level 15 noone
Related solutions: Found on page:
Creating a Standard Access List 402
Creating an Extended Access List 403
Enabling Port Security 411
Setting Privilege Levels
Using the privilege level command allows you to assign a better−defined set of commands for a selected user.
Let’s walk through how to do this:
Select a user and associate that user with a privilege level. In this example I will use myself and the
login name SeanO. I’ll assign myself a privilege level of 3. To do this, use the following command in
Global Configuration Mode:
5000RSM(config)# privilege configure level 3 seano
5000RSM(config)#
1.
You should assign an enable password for each configured privilege level. To assign the password a
privilege level of 3, use the following command:
5000RSM(config)# enable secret level 3 sean1
2.
To get into the switch, I will now use the following command:3.
5000RSM(config)# username seano password sean1
Assigning Allowable Commands
To allow a user to use only certain show commands, but give him no access to debug or configuration
commands, use the following command:
5000RSM(config)# privilege exec level 3 show
5000RSM(config)#
To allow users with privilege level 3 a specific command syntax for debug, such as debug ip, use the
following command:
5000RSM1(config)# privilege exec level 3 debug ip
5000RSM1(config)#
Note Privilege level 0 includes five commands: disable, enable, exit, help, and logout.
Setting the Console Port Time−out Value
To configure a time−out value for IOS−based Cisco switches, use the following command:
CAT2924XL(config)# line console
CAT2924XL(config)# time−out 300
40
To Next Page
Loading...
