Configuration example, Setting the level of a command in a specific view – H3C Technologies H3C WX3000 Series Unified Switches User Manual

Page 29

Advertising
background image

1-3

Configuration example

After a general user telnets to the device, his/her user level is 0. Now, the network administrator wants
to allow general users to switch to level 3, so that they are able to configure the device.

# A level 3 user sets a switching password for user level 3.

<device> system-view

[device] super password level 3 simple 123

# A general user telnets to the device, and then uses the set password to switch to user level 3.

<device> super 3

Password:

User privilege level is 3, and only those commands can be used

whose level is equal or less than this.

Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE

# After configuring the device, the general user switches back to user level 0.

<device> super 0

User privilege level is 0, and only those commands can be used

whose level is equal or less than this.

Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE

Setting the Level of a Command in a Specific View

Setting the level of a command in a specific view

Commands fall into four levels: visit (level 0), monitor (level 1), system (level 2), and manage (level 3).
By using the following command, the administrator can change the level of a command in a specific
view as required.

Follow these steps to set the level of a command output description in a specific view:

To do…

Use the command…

Remarks

Enter system view

system-view

Configure the level of a command
in a specific view

command-privilege level

level

view

view command

Required

z

It is recommended not to change the level of a command arbitrarily, for it may cause inconvenience
to maintenance and operation.

z

When you change the level of a command with multiple keywords, you should input the keywords
one by one in the order they appear in the command syntax. Otherwise, your configuration will not
take effect.

Configuration example

The network administrator (a level 3 user) wants to change some TFTP commands (such as tftp get)
from level 3 to level 0, so that general Telnet users (level 0 users) are able to download files through
TFTP.

# Change the tftp get command in user view (shell) from level 3 to level 0. (Originally, only level 3 users
can change the level of a command.)

Advertising