02.10.2013 Views

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Step Command Syntax Command Mode Purpose<br />

3<br />

privilege mode {level level<br />

command | reset command}<br />

To view <strong>the</strong> configuration, use <strong>the</strong> show running-config command in <strong>the</strong> EXEC privilege mode.<br />

Figure 66 is an example of a configuration to allow a user “john” to view only <strong>the</strong> EXEC mode commands<br />

and all snmp-server commands. Since <strong>the</strong> snmp-server commands are “enable” level commands and, by<br />

default, found in <strong>the</strong> CONFIGURATION mode, you must also assign <strong>the</strong> launch command <strong>for</strong> <strong>the</strong><br />

CONFIGURATION mode, configure, to <strong>the</strong> same privilege level as <strong>the</strong> snmp-server commands.<br />

<strong>Force10</strong>(conf)#username john privilege 8 password john<br />

<strong>Force10</strong>(conf)#enable password level 8 notjohn<br />

<strong>Force10</strong>(conf)#privilege exec level 8 configure<br />

<strong>Force10</strong>(conf)#privilege config level 8 snmp-server<br />

<strong>Force10</strong>(conf)#end<br />

<strong>Force10</strong>#show running-config<br />

Current <strong>Configuration</strong> ...<br />

!<br />

hostname <strong>Force10</strong><br />

!<br />

enable password level 8 notjohn<br />

enable password <strong>for</strong>ce10<br />

!<br />

username admin password 0 admin<br />

username john password 0 john privilege 8<br />

!<br />

privilege exec level 8 configure<br />

privilege configure level 8 snmp-server<br />

!<br />

Figure 66 Configuring a Custom Privilege Level<br />

CONFIGURATION Configure level and commands <strong>for</strong> a mode<br />

or reset a command’s level. Configure <strong>the</strong><br />

following required and optional parameters:<br />

• mode: Enter a keyword <strong>for</strong> <strong>the</strong> modes<br />

(exec, configure, interface, line,<br />

route-map, router)<br />

• level level range: 0 to 15. Levels 0, 1 and<br />

15 are pre-configured. Levels 2 to 14 are<br />

available <strong>for</strong> custom configuration.<br />

• command: A <strong>FTOS</strong> CLI keyword (up to 5<br />

keywords allowed).<br />

• reset: Return <strong>the</strong> command to its default<br />

privilege mode.<br />

The user john is assigned privilege<br />

level 8 and assigned a password.<br />

All o<strong>the</strong>r users are assigned a<br />

password to access privilege level 8<br />

The command configure is assigned<br />

to privilege level 8 since it is needed<br />

to reach <strong>the</strong> CONFIGURATION<br />

mode where <strong>the</strong> snmp-server<br />

commands are located.<br />

The snmp-server commands, in <strong>the</strong><br />

CONFIGURATION mode, are<br />

assigned to privilege level 8.<br />

<strong>FTOS</strong> <strong>Configuration</strong> <strong>Guide</strong>, version 7.7.1.0 143

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!