Dell Force10 MXL Blade - Page 485

Security | 483
To view the configuration, use the show running-config command in EXEC Privilege mode.
Figure 28-4 is an example of a configuration to allow a user “john” to view only EXEC mode commands
and all
snmp-server commands. Because the snmp-server commands are “enable” level commands and, by
default, found in CONFIGURATION mode, you must also assign the launch command for
CONFIGURATION mode,
configure, to the same privilege level as the snmp-server commands.
Figure 28-4. Configuring a Custom Privilege Level
Figure 28-5 is a screen shot of the Telnet session for user “john”. The show privilege command output
confirms that “john” is in privilege level 8. In EXEC Privilege mode, “john” can access only the
commands listed. In CONFIGURATION mode, “john” can access only the
snmp-server commands.
Figure 28-5. User john’s Login and the List of Available Commands
FTOS(conf)#username john privilege 8 password john
FTOS(conf)#enable password level 8 notjohn
FTOS(conf)#privilege exec level 8 configure
FTOS(conf)#privilege config level 8 snmp-server
FTOS(conf)#end
FTOS#show running-config
Current Configuration ...
!Version E8-3-21-0
hostname FTOS
!
enable password level 8 notjohn
enable password FTOS
!
username admin password 0 admin
The user john is assigned privilege level
8 and assigned a password.
All other users are assigned a password
to access privilege level 8
The command configure is assigned to
privilege level 8 because it is needed to
reach CONFIGURATION mode where
the snmp-server commands are located.
The snmp-server commands, in
CONFIGURATION mode, are assigned
to privilege level 8.
apollo% telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: john
Password:
FTOS#show priv
Current privilege level is 8
FTOS#?
configure Configuring from terminal
disable Turn off privileged commands
enable Turn on privileged commands
exit Exit from the EXEC
no Negate a command
show Show running system information
terminal Set terminal line parameters
traceroute Trace route to destination
FTOS#confi
FTOS(conf)#?
end Exit from Configuration mode