Dell Force10 MXL Blade MXL 10/40GbE Switch IO Module Configuration Guide - Page 485

To view the configuration, use the show running-config command in EXEC Privilege mode. Figure 28-4 is an example of a configuration to allow a user "john" to view only EXEC mode commands and all snmp-server commands. Because the snmp-server commands are "enable" level commands and, by default, found in CONFIGURATION mode, you must also assign the launch command for CONFIGURATION mode, configure, to the same privilege level as the snmp-server commands. Figure 28-4. Configuring a Custom Privilege Level FTOS(conf)#username john privilege 8 password john FTOS(conf)#enable password level 8 notjohn FTOS(conf)#privilege exec level 8 configure FTOS(conf)#privilege config level 8 snmp-server FTOS(conf)#end FTOS#show running-config Current Configuration ... !Version E8-3-21-0 hostname FTOS ! enable password level 8 notjohn enable password FTOS ! username admin password 0 admin The user john is assigned privilege level 8 and assigned a password. All other users are assigned a password to access privilege level 8 The command configure is assigned to privilege level 8 because it is needed to reach CONFIGURATION mode where the snmp-server commands are located. The snmp-server commands, in CONFIGURATION mode, are assigned to privilege level 8. Figure 28-5 is a screen shot of the Telnet session for user "john". The show privilege command output confirms that "john" is in privilege level 8. In EXEC Privilege mode, "john" can access only the commands listed. In CONFIGURATION mode, "john" can access only the snmp-server commands. Figure 28-5. User john's Login and the List of Available Commands apollo% telnet 172.31.1.53 Trying 172.31.1.53... Connected to 172.31.1.53. Escape character is '^]'. Login: john Password: FTOS#show priv Current privilege level is 8 FTOS#? configure Configuring from terminal disable Turn off privileged commands enable Turn on privileged commands exit Exit from the EXEC no Negate a command show Show running system information terminal Set terminal line parameters traceroute Trace route to destination FTOS#confi FTOS(conf)#? end Exit from Configuration mode Security | 483