Chapter 7
| Authentication Commands
User Accounts and Privilege Levels
– 182 –
User Accounts and Privilege Levels
The basic commands required for management access and assigning command
privilege levels are listed in this section. This switch also includes other options for
password checking via the console or a Telnet connection (page 113), user
authentication via a remote authentication server (page 181), and host access
authentication for specific ports (page 219).
enable password After initially logging onto the system, you should set the Privileged Exec password.
Remember to record it in a safe place. This command controls access to the
Privileged Exec level from the Normal Exec level. Use the no form to reset the
default password.
Syntax
enable password [level level] {0 | 7} password
no enable password [level level]
level level - Level 15 for Privileged Exec. (Levels 0-14 are not used.)
{0 | 7} - 0 means plain password, 7 means encrypted password.
password - Password for this privilege level. (Maximum length:
32 characters plain text or encrypted, case sensitive)
Default Setting
The default is level 15.
The default password is “super”
Command Mode
Global Configuration
Command Usage
◆ You cannot set a null password. You will have to enter a password to change the
command mode from Normal Exec to Privileged Exec with the enable
command.
Table 32: User Access Commands
Command Function Mode
enable password Sets a password to control access to the Privileged Exec
level
GC
username Establishes a user name-based authentication system at
login
GC
privilege Assigns a privilege level to specified command groups or
individual commands
GC
show privilege Shows the privilege level for the current user, or the
privilege level for commands modified by the privilege
command
PE