enable password cannot effect

[wfqk]

Hi, In following two commands, first command can work, but second one cannot work to enable password. I think the second one needs another command to work with it. Any one can give me an example ?

Thank you

--------------------------

R6(config)#enable secret cisco

R6(config)#enable secret level 6 cisco

[Mark Malone]

Hi you can grant access by level for users levels1-15 , 15 being the highest allowing them do anything , 1 being restricted only certain commands users are allowed use

http://www.cisco.com/c/en/us/td/docs/ios/12_2/security/configuration/guide/fsecur_c/scfpass.html#wp1000944

Cisco IOS Privilege Levels

The default configuration for Cisco IOS software-based networking devices uses privilege level 1 for user EXEC mode and privilege level 15 for privileged EXEC. The commands that can be run in user EXEC mode at privilege level 1 are a subset of the commands that can be run in privileged EXEC mode at privilege 15.

[wfqk]

@Madhukrishnan, "---What do you mean by cannot work? "

That means after using first command -- "enable secret cisco", enable password is required, when you try to login the router

while after using the second command -- "enable secret level 6 cisco", enable password is not required when you try to login the router. 

[InayathUlla Sharieff]

@showip interface:-

When ever you use any value then the default for the enable secret it byforget the enable password. So if you want to use it you dont need to specify the level command. What do you want to achieve setting the level on the enable passowrd? Either it needs to be allowed or it should be disabled.  You cannot imagine that setting the level forthe password to have some impact after the user login with the priviledge set on the enable password.

HTH

Regards

inayath

[wfqk]

After I reviewed Cisco document, my understanding is "enable secret level x(1-15) password" is for user with certain privilege level. But it looks like that it is not. Can you give me an example how to use the command(enable secret level password) if it is not complicated ? and what is its purpose ?

[Madhukrishnan Gopinathan Nair]

What do you mean by cannot work?