Security Configuration Guide Cisco IOS XE Release 3SE (Catalyst 3850 Switches) -Controlling Information About Passwords and Privilege Levels
Cisco switches (and other devices) use privilege levels to provide password security for different levels of switch operation. By default the Cisco IOS
Security Configuration Guide Cisco IOS Release 15.2(2)E (Catalyst 2960-X Switch) -Controlling Switch Access with Passwords and Privilege Levels.
For more information see the Cisco IOS Login Enhancements documentation. Default Password and Privilege Level Configuration. A simple way of providing terminal
Catalyst 2960-X Switch Security Configuration Guide Cisco IOS Release 15.0(2)EX -Controlling Switch Access with Passwords and Privilege Levels.
Software Configuration Guide Cisco IOS Release 15.2(6)E (Catalyst 2960-L Switches) Information About Passwords and Privilege Levels
Type 6 encrypted password is supported from Cisco IOS XE Gibraltar 16.10.1 2. Controlling Switch Access with Passwords and Privilege Levels.
Type 6 encrypted password is supported from Cisco IOS XE Gibraltar 16.10.1 2. Controlling Switch Access with Passwords and Privilege Levels.
By default the Cisco IOS software operates in two modes (privilege levels) of password security: user EXEC (Level. 1) and privileged EXEC (Level 15). You can
Software Configuration Guide Cisco IOS XE Denali 16.2.1 (Catalyst 3650 Switches) -Controlling Information About Passwords and Privilege Levels
2 configure terminal 3 privilege mode level level command 4 enable password level level password 5 end 6 copy running-config startup-config ControllingSwitchAccesswithPasswordsandPrivilegeLevels 11 ControllingSwitchAccesswithPasswordsandPrivilegeLevels SettingthePrivilegeLevelforaCommand
Default Password and Privilege Level Configuration Asimplewayofprovidingterminalaccesscontrolinyournetworkistousepasswordsandassignprivilege levels Passwordprotectionrestrictsaccesstoanetworkornetworkdevice Privilegelevelsdefinewhat commandsuserscanenteraftertheyhaveloggedintoanetworkdevice
privilege level 2: Switch(config)# enable secret level 2 5 $1$FaD0$Xyti5Rkls3LoyxzS8 Disabling Password Recovery By default any end user with physical access to the switch can recover from a lost password by interrupting the boot process while the switch is powering on and then by entering a new password
By default the Cisco IOS software has two modes of password security: user mode (EXEC) andprivilege mode (enable) You can con?gure up to 16 hierarchical levels of commands for each mode By con?guring multiple passwords you can allow different sets of users to have access to speci?edcommands
2 configure terminal 3 privilege mode level level command 4 enable password level level password 5 end 6 copy running-config startup-config DETAILEDSTEPS CommandorAction Purpose Step1 enable EnablesprivilegedEXECmode Example: Enteryourpasswordifprompted Device>enable configure terminal Entersglobalconfigurationmode Example: Step2
to a networking device in privileged EXEC mode your session is running at privilege level 15 You can move commands to any privilege level between 1 and 15 using the privilege command See the Cisco IOS Privilege Levels page 9 for more information on privilege levels and the privilege command