Superseding Privilege Levels with the all Keyword
Issuing the all keyword supersedes privilege levels that were previously set without
the all keyword.
In the following example, the snmp-server-community command is set to level 7,
and the snmp keyword is set to level 6. The privilege level of the snmp keyword
does not override the snmp-server community setting, because both of these
commands are set without the all keyword.
host1(config)#privilege configure level 7 snmp-server community
host1(config)#privilege configure level 6 snmp
All snmp commands are then changed to level 5 with the all keyword.
host1(config)#privilege configure all level 5 snmp
The show configuration output displays all snmp commands at level 5, superseding
the existing level 6 setting. The snmp-server community command is still present
in the show configuration output, but it is ineffective.
host1#show config category management cli command-privileges
privilege configure level 7 snmp-server community
privilege configure all level 5 snmp-server
Removing the all Keyword
Using the no version or reset version removes the all keyword and restores default
privilege levels.
If the privilege setting of the mode or command for which you are restoring default
privilege levels takes precedence over any ineffective privilege settings, those settings
will automatically take effect according to the order of precedence (see “Using the
Order of Precedence” on page 60 ).
The difference between the no version and the reset version is that the reset version
removes the configuration from the show configuration output. This is useful when
you want to remove a configuration that has been overridden and rendered ineffective
by a privilege level that takes precedence.
Setting Default Line Privilege
The factory default privilege level for the console line and all vty lines is 1. However,
you can use the privilege level command in Line Configuration mode to set the
default login privilege for the console line or any number of vty lines.
To change the default privilege level:
1. Access line configuration mode on the router for the console.
host1(config)#line console 0
host1(config-line)#
CLI Command Privileges ■ 61
Chapter 2: Command-Line Interface
To Next Page
Loading...
Need help?
General
