Chapter 8
| Authentication Commands
User Accounts and Privilege Levels
– 244 –
User Accounts and Privilege Levels
The basic commands required for management access and assigning command
privilege levels are listed in this section. This switch also includes other options for
password checking via the console or a Telnet connection (page 154), user
authentication via a remote authentication server (page 243), and host access
authentication for specific ports (page 284).
enable password After initially logging onto the system, you should set the Privileged Exec password.
Remember to record it in a safe place. This command controls access to the
Privileged Exec level from the Normal Exec level. Use the no form to reset the
default password.
Syntax
enable password [level level] {0 | 7} password
no enable password [level level]
level level - Sets the command access privileges. (Range: 0-15)
Level 0 provides access privileges all within Normal Exec mode under the
“Console>” command prompt.
Levels 1-15 provide the same default access privileges in Privileged Exec
mode under the “Console#” command prompt. This provides full access
to all commands.
The privilege level associated with any command can be changed using
the privilege command.
{0 | 7} - 0 means plain password, 7 means encrypted password.
password - Password for this privilege level.
(Maximum length: 32 characters plain text or encrypted, case sensitive)
Default Setting
The default is level 15.
The default password is “super”
Table 37: User Access Commands
Command Function Mode
enable password Sets a password to control access to the Privileged Exec
level
GC
username Establishes a user name-based authentication system at
login
GC
privilege Assigns a privilege level to specified command groups or
individual commands
GC
show privilege Shows the privilege level for the current user, or the
privilege level for commands modified by the privilege
command
PE