Enterasys Networks X-Pedition XSR CLI - Manual (Page 24)

General Network Management Commands
1-10 Network Management
Mode
Global configuration: XSR(config)#
Defaults
• Privilege level 0: all statistics ( show ) commands with low‐level security such as show version ,
show clock , etc.
• Privilege levels 1 through 9 ‐ the following EXEC Mode commands are available: disable,
exit, help, isdn, ping, telnet, terminal , and traceroute . Unless explicitly defined,
users having privilege levels 1 ‐ 9 have no access to Privileged EXEC commands.
• Privilege levels 10 through 14 ‐ the following Privileged EXEC mode commands are available:
cd, clear, clock, dir, disable, enable, exit, help, isdn, no, ping, pwd,
reload, telnet, terminal, traceroute
, and verify . Unless explicitly defined, only level
15 users can access Global Mode commands.
• Privilege level 10: all statistics ( show ) commands with higher level security such as show
running-config, show interface , etc.
• Privilege level 15: other configuration commands such as configure, copy, delete,
rename, write. Only an admin can issue these commands.
• Any user privilege level automatically inherits all privileges granted to lower privilege levels.
• Admin privilege level (15) cannot be changed.
• Privilege for special user admin: 15
• Only administrators can add, delete, or change user rights.
• Only administrators can change privilege levels for commands.
• Users can change their own passwords but not their privilege levels.
Examples
This example sets the privilege level for the username command in Global mode to level 6:
XSR(config)#privilege configure level 6 username
This example resets the privilege level for the username command in Global mode to the default:
XSR(config)#privilege configure reset username
This example sets the privilege level for the neighbor command in Router RIP mode to level 13:
XSR(config)#privilege router-rip level 13 neighbor
value Privilege level associated with the mode of operation ranging from 0 to
15 (highest).
reset Resets the privilege level to the default.
command Command within that mode to set a privilege for.
commandgroup Set of commands to associate with a privilege. For example, T1
Controller group commands.