Dell Force10 Z9000 - Configure Custom Privilege Levels

790 | Security
www.dell.com | support.dell.com
Configure custom privilege levels
In addition to assigning privilege levels to the user, you can configure the privilege levels of commands so
that they are visible in different privilege levels. Within FTOS, commands have certain privilege levels.
With the privilege command, the default level can be changed or you can reset their privilege level back to
the default.
• Assign the launch keyword (for example,
configure) for the keyword’s command mode.
• If you assign only the first keyword to the privilege level, all commands beginning with that keyword
are also assigned to the privilege level. If you enter the entire command, the software assigns the
privilege level to that command only.
To assign commands and passwords to a custom privilege level, you must be in privilege level 15 and use
these commands in the following sequence in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1
username name [access-class
access-list-name] [privilege level]
[
nopassword | password
[
encryption-type] password]
CONFIGURATION Assign a user name and password. Configure the
optional and required parameters:
• name: Enter a text string (up to 63
characters).
• access-class access-list-name: Enter the
name of a configured IP ACL.
• privilege level range: 0 to 15.
• nopassword: Do not require the user to
enter a password.
• encryption-type: Enter 0 for plain text or 7
for encrypted text.
• password: Enter a string.
2 enable password [level level]
[encryption-mode] password
CONFIGURATION Configure a password for privilege level.
Configure the optional and required parameters:
• level level: Specify a level 0 to 15. Level 15
includes all levels.
• encryption-type: Enter 0 for plain text or 7
for encrypted text.
• password: Enter a string up to 25 characters
long.
To change only the password for the enable
command, configure only the password
parameter.