Configuring Privilege Levels

Sometimes larger organizations have the need for multiple levels of privilege on the router. For example, a larger Network Operations Center (NOC) might have three levels of technicians. Levels 1 and 2 might be granted access to only certain commands, but the level 3 tech might have full access. Here´s where privilege levels come in handy. There can be 16 privilege levels on a Cisco router, but the defaults is to use only three: 0, 1, and 15. Levels 2 to 14 can be configured as custom privilege levels.

Here is a sample of a privilege level command:

Router(config)# privilege exec level 2 traceroute
Router(config)# enable secret level 2 PASSWORD

If the router is configured in this way, you would log in as level 2 using the following command:

Router> enable 2
Router# show privilege
Current privilege level is 2

Once you´ve logged in, the router is configured to allow users who log in as level 2 to use the traceroute command.


See Also:



biOos