FTOS Configuration Guide for the C-Series - Force10 Networks

• Privilege level 15—the default level for the enable command, is the highest level. In this level you can
access any command in FTOS.
Privilege levels 2 through 14 are not configured and you can customize them for different users and access.
After you configure other privilege levels, enter those levels by adding the level parameter after the enable
command or by configuring a user name or password that corresponds to the privilege level. Refer to
Configuring a user name and password on page 140 for more information on configuring user names.
By default, commands in FTOS are assigned to different privilege levels. You can access those commands
only if you have access to that privilege level. For example, to reach the protocol spanning-tree
command, you must log in to the router, enter the enable command for privilege level 15 (this is the
default level for the command) and then enter the CONFIGURATION mode.
You can configure passwords to control access to the box and assign different privilege levels to users.
FTOS supports the use of passwords when you log in to the system and when you enter the enable
command. If you move between privilege levels, you are prompted for a password if you move to a higher
privilege level.
Configuration Task List for Privilege Levels
The following list has the configuration tasks for privilege levels and passwords.
• Configuring a user name and password on page 140 (mandatory)
• Configuring the enable password command on page 141 (mandatory)
• Configuring custom privilege levels on page 142 (mandatory)
• Specifying LINE mode password and privilege on page 144 (optional)
• Enabling and disabling privilege levels on page 145 (optional)
For a complete listing of all commands related to FTOS privilege levels and passwords, refer to the
Security chapter in the FTOS Command Reference.
Configuring a user name and password
In FTOS, you can assign a specific user name to limit user access to the system.
140 Security