Cisco Cat4K NDPP ST
EDCS-1228241
TOE SFRs
How the SFR is Met
staff that are usually not allowed to run all of the commands
available in privileged EXEC mode (privilege level 15) on a
networking device. They are prevented from running commands
that they are not authorized for by not being granted access to the
password assigned to privileged EXEC mode or to other levels
that have been configured on the networking device.
The steps and commands show setting privilege level 7 with
access to two commands, clear counters and reload.
Step 1 enable password
Router> enable
Step 2 configure terminal
Router# configure terminal
Step 3 enable secret level level password
Router(config)# enable secret level 7 Zy72sKj
Step 4 privilege exec level level command-string
Router(config)# privilege exec level 7 clear
counters
Step 5 privilege exec all level level command-string
Router(config)# privilege exec all level 7
reload
Step 6 end
Router(config)# end
The following example shows the enforcement of the settings
above and privilege levels.
Step 1 enable level password
Router> enable 7 Zy72sKj
Step 2 show privilege
Router# show privilege
75
Enters privileged EXEC mode. Enter
the password when prompted.
Enters global configuration mode.
Configures
a
new
password for privilege level 7.
Changes the privilege level of the clear
counters command from privilege level
15 to privilege level 7.
Changes the privilege level of the
reload command from privilege level
15 to privilege level 7.
Exits global configuration mode.
Logs the user into the networking
device at the privilege level specified
for the level argument.
Displays the privilege level of the
current CLI session
Current privilege level is 7
11 March 2014
enable
secret