Example of AAA authorization with privilege levels

On the router, we are going to execute the following commands which will secure access to the console port, the aux port and the VTY lines:

R1 (config)#line con 0
R1 (config-line)#exec-timeout 0 0
R1 (config-line)#password cisco
R1 (config-line)#logging synchronous
R1 (config-line)#enable password cisco
R1 (config-line)#line vty 0 4
R1(config-line)#login
R1(config-line)#password cisco
R1(config-line)#exec-timeout 0 0
R1(config-line)#line aux 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#login
R1(config-line)#password cisco

Checking if the privilege level is configured on R1:

R1#show privilege
Current privilege level is 15

Configuring custom privilege levels by adding the following entries to the authentication database on R1:

R1(config)#username cisco0 privilege 0 password cisco0
R1(config)#username cisco15 privilege 15 password cisco15
R1(config)#username cisco7 privilege 7 password cisco7
R1(config)#aaa new-model
R1(config)#aaa authentication login default local
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.147.104.120