Cisco 2950 Software Configuration Guide - Page 182

Protecting Access to Privileged EXEC Commands Chapter 9 Configuring Switch-Based Authentication Protecting Access to Privileged EXEC Commands A simple way of providing terminal access control in your network is to use passwords and assign privilege levels. Password protection restricts access to a network or network device. Privilege levels define what commands users can enter after they have logged into a network device. Note For complete syntax and usage information for the commands used in this section, refer to the Cisco IOS Security Command Reference for Cisco IOS Release 12.1. This section describes how to control access to the configuration file and privileged EXEC commands. It contains this configuration information: • Default Password and Privilege Level Configuration, page 9-2 • Setting or Changing a Static Enable Password, page 9-3 • Protecting Enable and Enable Secret Passwords with Encryption, page 9-4 • Disabling Password Recovery, page 9-5 • Setting a Telnet Password for a Terminal Line, page 9-6 • Configuring Username and Password Pairs, page 9-7 • Configuring Multiple Privilege Levels, page 9-8 Default Password and Privilege Level Configuration Table 9-1 shows the default password and privilege level configuration. Table 9-1 Default Password and Privilege Levels Feature Enable password and privilege level Enable secret password and privilege level Line password Default Setting No password is defined. The default is level 15 (privileged EXEC level). The password is not encrypted in the configuration file. No password is defined. The default is level 15 (privileged EXEC level). The password is encrypted before it is written to the configuration file. No password is defined. Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-2 78-11380-10