Cisco 7609-S Software Configuration Guide - Page 66

Protecting Access to Privileged EXEC Commands Chapter 3 Configuring the Router for the First Time For example, if you want many users to have access to the clear line command, you can assign it level 2 security and distribute the level 2 password widely. If you want more restricted access to the configure command, you can assign it level 3 security and distribute that password to more restricted users. These tasks describe how to configure additional levels of security: • Setting the Privilege Level for a Command, page 3-18 • Changing the Default Privilege Level for Lines, page 3-18 • Logging In to a Privilege Level, page 3-18 • Exiting a Privilege Level, page 3-19 • Displaying the Password, Access Level, and Privilege Level Configuration, page 3-19 Setting the Privilege Level for a Command To set the privilege level for a command, perform this task: Step 1 Step 2 Command Router(config)# privilege mode level level command Router(config)# enable password level level [encryption-type] password Purpose Sets the privilege level for a command. Specifies the enable password for a privilege level. To display the password or access level configuration, see the "Displaying the Password, Access Level, and Privilege Level Configuration" section on page 3-19. Changing the Default Privilege Level for Lines To change the default privilege level for a given line or a group of lines, perform this task: Command Router(config-line)# privilege level level Purpose Changes the default privilege level for the line. To display the password or access level configuration, see the "Displaying the Password, Access Level, and Privilege Level Configuration" section on page 3-19. Logging In to a Privilege Level To log in at a specified privilege level, perform this task: Command Router# enable level Purpose Logs into a specified privilege level. 3-18 Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX OL-4266-08