Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 492)

100

101

30-8

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 30 Managing System Access

Authenticating and Authorizing System Administrators

Local Command Authorization Prerequisites

Complete the following tasks as part of your command authorization configuration:

• Configure enable authentication. (See the “Configuring Authentication To Access Privileged EXEC

Mode” section on page 30-5.)

Alternatively, you can use the login command (which is the same as the enable command with

authentication), which requires no configuration. We do not recommend this option because it is not

as secure as enable authentication.

You can also use CLI authentication, but it is not required.

• Configure each user in the local database at a privilege level from 0 to 15.

Default Command Privilege Levels

By default, the following commands are assigned to privilege level 0. All other commands are at

level 15.

• show checksum

• show curpriv

• enable (enable mode)

• help

• show history

• login

• logout

• pager

• show pager

• clear pager

• quit

• show version

If you move any configure mode commands to a lower level than 15, be sure to move the configure

command to that level as well, otherwise, the user will not be able to enter configuration mode.

To view all privilege levels, see the “Viewing Command Privilege Levels” section on page 30-10.

Assigning Privilege Levels to Commands and Enabling Authorization

To assign a command to a new privilege level, and enable authorization, follow these steps:

Step 1 To assign a command to a privilege level, enter the following command:

hostname(config)# privilege [show | clear | cmd] level

level

[mode {enable | cmd}] command

command

Repeat this command for each command you want to reassign.

1 2 ... 487 488 489 490 491 492 493 494 495 496 497 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 492

Kommentare zu diesen Handbüchern