Table of Contents

1 CLI Configuration Commands· 1-1

CLI Configuration Commands· 1-1

command-privilege level 1-1

display history-command· 1-1

super 1-2

super password· 1-3

 

CLI Configuration Commands

command-privilege level

Syntax

command-privilege level level view view command

undo command-privilege view view command

View

System view

Parameters

level level: Command level to be set, in the range of 0 to 3.

view view: CLI view. It can be any CLI view that the device supports.

command: Command for which the level is to be set.

Description

Use the command-privilege level command to set the level of a specified command in a specified view.

Use the undo command-privilege view command to restore the default level of a specified command in a specified view.

Commands fall into four levels: visit (level 0), monitor (level 1), system (level 2), and manage (level 3). The administrator can change the level of a command as required. For example, the administrator can change a command from a higher level to a lower level so that the lower level users can use the command.

By default, the ping, tracert, and telnet commands are at the visit level (level 0), the debugging and terminal commands are at the monitor level (level 1), all configuration commands are at the system level (level 2), and FTP, TFTP, Xmodem and file system operation commands are at the manage level (level 3).

Examples

# Set the level of the system-view command in user view (shell) to 0.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] command-privilege level 0 view shell system-view

display history-command

Syntax

display history-command

View

Any view

Parameters

None

Description

Use the display history-command command to display the history commands of the current user, so that the user can check the configurations performed formerly.

History commands are those commands that was successfully executed recently and saved in the history command buffer. You can set the size of the buffer by the history-command max-size command. When the history command buffer is full, the earlier commands will be overwritten by the new ones.

By default, the CLI can save 10 history commands for each user.

Related commands: history-command max-size in Login.

Examples

# Display the history commands of the current user.

<device> display history-command

  system-view

  quit

  display history-command

super

Syntax

super [ level ]

View

User view

Parameters

level: User level, in the range of 0 to 3.

Description

Use the super command to switch from the current user level to a specified level.

Executing this command without the level argument will switch the current user level to level 3 by default.

Note that:

l          Users logged into the switch fall into four user levels, which correspond to the four command levels respectively. Users at a specific level can only use the commands at the same level or lower levels.

l          If a switching password is set for a specific user level by the super password command, all users must enter the password correctly when they switch from lower user levels to this level (if a wrong password is entered, they will remain at their original levels).

l          If no switching password is set for a specific user level, the Console user can directly switch to the level, while the Telnet users at lower levels will fail to switch to the level (they will remain at their original levels) and the information like the following will be displayed: % Password is not set.

l          Users can directly switch from a higher user level to a lower user level, no matter whether a switching password is set.

Related commands: super password.

Examples

# Switch from current user level (a lower level) to user level 3.

<device> super 3

 Password:

User privilege level is 3, and only those commands can be used

whose level is equal or less than this.

Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE

super password

Syntax

super password [ level level ] { cipher | simple } password

undo super password [ level level ]

View

System view

Parameters

level level: User level, in the range of 1 to 3. it is 3 by default.

cipher: Stores the password in the configuration file in ciphered text.

simple: Stores the password in the configuration file in plain text.

password: Password to be set. If the simple keyword is used, you must provide a plain-text password, that is, a string of 1 to 16 characters. If the cipher keyword is used, you can provide a password in either of the two ways:

l          Input a plain-text password, that is, a string of 1 to 16 characters, which will be automatically converted into a 24-character cipher-text password.

l          Directly input a cipher-text password, that is, a string of 1 to 24 characters, which must correspond to a plain-text password. For example, The cipher-text password “_(TT8F]Y\5SQ=^Q`MAF4<1!!” corresponds to the plain-text password “1234567”.

Description

Use the super password command to set a switching password for a specified user level, which will be used when users switch from a lower user level to the specified user level.

Use the undo super password command to restore the default configuration.

By default, no such password is set.

For security purpose, the password entered is not displayed when you switch to another user level. You will remain at the original user level if you have tried three times but failed to enter the correct password.

Note that, no matter whether a plain-text or cipher-text password is set, users must enter the plain-text password during authentication.

Examples

# Set the switching password for level 3 to “0123456789” in plain text.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] super password level 3 simple 0123456789