FTOS Configuration Guide for the C-Series - Force10 Networks

Configuring custom privilege levels
In addition to assigning privilege levels to the user, you can configure the privilege levels of commands so
that they are visible in different privilege levels. Within FTOS, commands have certain privilege levels.
With the privilege command, the default level can be changed or you can reset their privilege level back to
the default.
• Assign the launch keyword (for example, configure) for the keyword’s command mode.
• If you assign only the first keyword to the privilege level, all commands beginning with that keyword
are also assigned to the privilege level. If you enter the entire command, the software assigns the
privilege level to that command only.
To assign commands and passwords to a custom privilege level, you must be in privilege level 15 and use
these commands in the following sequence in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1 username name [access-class
access-list-name] [privilege level]
[nopassword | password
[encryption-type] password]
2
enable password [level level]
[encryption-mode] password
CONFIGURATION Assign a user name and password.
Configure the optional and required
parameters:
• name: Enter a text string.
• access-class access-list-name: Enter the
name of a configured IP ACL.
• privilege level range: 0 to 15.
• nopassword: Do not require the user to
enter a password.
• encryption-type: Enter 0 for plain text or 7
for encrypted text.
• password: Enter a string.
CONFIGURATION Configure a password for privilege level.
Configure the optional and required
parameters:
• level level: Specify a level 0 to 15. Level
15 includes all levels.
• encryption-type: Enter 0 for plain text or 7
for encrypted text.
• password: Enter a string up to 25
characters long.
To change only the password for the enable
command, configure only the password
parameter.
142 Security