Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 36)

18 Multi-Service IronWare Security Configuration Guide
53-1003035-02
Setting passwords
1
Syntax: enable super-user-password text
Syntax: enable port-config-password text
Syntax: enable read-only-password text
NOTE
If you forget your Super User level password, refer to “Recovering from a lost password” .
NOTE
When enable strict-password-enforcement is enabled, the user uses the enable
super-user-password to log in, and the enable-super-user password command is used, the following
prompt is displayed:
Enter old password.
After validating the old password, the following prompt is displayed:
Enter new password.
Augmenting management privilege levels
Each management privilege level provides access to specific areas of the CLI by default:
• Super User level provides access to all commands and displays.
• Port Configuration level gives access to the following:
• The User EXEC and Privileged EXEC levels
• The port-specific parts of the CONFIG level
• All interface configuration levels
• Read Only level gives access to the following:
• The User EXEC and Privileged EXEC levels
You can grant additional access to a privilege level on an individual command basis. To grant the
additional access, you specify the privilege level you are enhancing, the CLI level that contains the
command, and the individual command.
NOTE
This feature applies only to management privilege levels on the CLI. You cannot augment
management access levels for the Web Management Interface.
To enhance the Port Configuration privilege level so users also can enter IP commands at the
global CONFIG level.
Brocade(config)# privilege configure level 4 ip
In this command, configure specifies that the enhanced access is for a command at the global
CONFIG level of the CLI. The level 4 parameter indicates that the enhanced access is for
management privilege level 4 (Port Configuration). All users with Port Configuration privileges will
have the enhanced access. The ip parameter indicates that the enhanced access is for the IP
commands. Users who log in with valid Port Configuration level user names and passwords can
enter commands that begin with “ip” at the global CONFIG level.
Syntax: [no] privilege cli-level level privilege-level command-string
The cli-level parameter specifies the CLI level and can be one of the following values:
• exec – EXEC level; for example, Brocade#