12-10-2014 02:22 AM - edited 03-10-2019 10:15 PM
Dear all,
Let's say you make two users "bob" and "peter".
Bob has an privilege level of 15 and peter of 1.
So I do:
username bob privilege 15 secret 0 bob
-and-
username peter privilege 1 secret 0 peter
Now when I hit "show run" I see:
username bob secret 5 $1$mERr$2jygS30agKvkxKp5BbQlu.
username peter secret 5 $1$mERr$3XPqvFBeRKE8phC35ZpzY.
If I make any other user with any privilige level (except 1 and 15) the "show run" will print the level out like this:
username ellen privilege 4 secret 5 $1$mERr$3XPqvFBeRKE8phC35ZpzY.
So my question is: How can I see if an user is level 1 or level 15?
12-10-2014 10:56 PM
You can use the "show privilege" command once the user is logged in and that should display the current privilege level assigned to the user.
Thank you for rating helpful posts!
12-11-2014 02:28 AM
Show Privilege command is used to see the level.
Implementing privilege levels varies depending on the organization's structure and the different job functions that require access to the infrastructure devices.
In the case of the USER, which requires default level 1 (Router>) access, no custom privilege level is defined. This is because the default user mode is equivalent to level 1.
The SUPPORT account could be assigned a higher level access such as level 5. Level 5 automatically inherits the commands from levels 1 through 4, plus additional commands can be assigned. Keep in mind that when a command is assigned at a specific level, access to that command is taken away from any lower level. For example, to assign level 5 the ping command, use the following command sequence.
privilege exec level 5 ping
The USER account (level 1) no longer has access to the ping command, because a user must have access to level 5 or higher to perform the ping function.
To assign a password to level 5, enter the following command.
enable secret level 5 cisco5
To access level 5, the password cisco5 must be used.
To assign a specific username to privilege level 5, enter the following command.
username support privilege 5 secret cisco5
A user that logs in under the username support is only able to access privilege level 5, which also inherits privilege level 1.
12-11-2014 09:02 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide