Augmenting management privilege levels – Brocade Communications Systems Brocade ICX 6650 6650 User Manual
Page 35
Brocade ICX 6650 Security Configuration Guide
15
53-1002601-01
Passwords used to secure access
Syntax: enable read-only-password text
NOTE
If you forget your Super User level password, refer to
“Recovering from a lost password”
Augmenting management privilege levels
Each management privilege level provides access to specific areas of the CLI by default:
•
Super User level provides access to all commands and displays.
•
Port Configuration level gives access to:
-
The User EXEC and Privileged EXEC levels
-
The port-specific parts of the CONFIG level
-
All interface configuration levels
•
Read Only level gives access to:
-
The User EXEC and Privileged EXEC levels
You can grant additional access to a privilege level on an individual command basis. To grant the
additional access, you specify the privilege level you are enhancing, the CLI level that contains the
command, and the individual command.
NOTE
This feature applies only to management privilege levels on the CLI.
Enhance the Port Configuration privilege level so users also can enter IP commands at the global
CONFIG level.
Brocade(config)# privilege configure level 4 ip
In this command, configure specifies that the enhanced access is for a command at the global
CONFIG level of the CLI. The level 4 parameter indicates that the enhanced access is for
management privilege level 4 (Port Configuration). All users with Port Configuration privileges will
have the enhanced access. The ip parameter indicates that the enhanced access is for the IP
commands. Users who log in with valid Port Configuration level user names and passwords can
enter commands that begin with “ip” at the global CONFIG level.
Syntax: [no] privilege cli-level level privilege-level command-string
The cli-level parameter specifies the CLI level and can be one of the following values:
•
exec – EXEC level; for example, Brocade> or Brocade#
•
configure – CONFIG level; for example, Brocade(config)#
•
interface – Interface level; for example, Brocade(config-if-6)#
•
loopback-interface – loopback interface level
•
virtual-interface – Virtual-interface level; for example, Brocade(config-vif-6)#
•
dot1x – 802.1X configuration level
•
ipv6-access-list – IPv6 access list configuration level
•
rip-router – RIP router level; for example, Brocade(config-rip-router)#
•
ospf-router – OSPF router level; for example, Brocade(config-ospf-router)#
•
pim-router – PIM router level; for example, Brocade(config-pim-router)#