Rockwell Automation 1783-WAPxxx Stratix 5100 Wireless Access Point User Manual - Manual (Page 207)

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014 207
Administering the WAP Access Chapter 6
Configuring Multiple
Privilege Levels By default, Cisco IOS software has two modes of password security: user EXEC
and privileged EXEC. You can configure up to 16 hierarchical levels of
commands for each mode. By configuring multiple passwords, you can allow
different sets of users to have access to specified commands.
For example, if you want many users to have access to the clear line
command, you can assign it level 2 security and distribute the level 2 password
fairly widely. But if you want more restricted access to the
configure
command, you can assign it level 3 security and distribute that password to a
more restricted group of users.
Setting the Privilege Level for a Command
Beginning in privileged EXEC mode, follow these steps to set the privilege level
for a command mode:
1. Enter global configuration mode.
configure terminal
2. Set the privilege level for a command.
• For
mode , enter configure for global configuration mode, exec for
EXEC mode, interface for interface configuration mode, or line
for line configuration mode.
• For
level , the range is from 0…15. Level 1 is for normal user EXEC
mode privileges. Level 15 is the level of access permitted by the enable
password.
• For
command , specify the command that you want to have restricted
access.
privilege mode level level command
3. Specify the enable password for the privilege level.
• For
level , the range is from 0…15. Level 1 is for normal user EXEC
mode privileges.
• For
password , specify a string from 1…25 alphanumeric characters. The
string cannot start with a number, is case sensitive, and allows spaces but
ignores leading spaces. By default, no password is defined.
enable password level level password
4. Return to privileged EXEC mode.
end
5. Verify your entries.
The first command provides the password and access level configuration.
The second command provides the privilege level configuration.
TIP Characters TAB, ?, $, +, and [ are invalid characters for passwords.