Please enable JavaScript.

Coggle requires JavaScript to display documents.

Assingning Administrative Roles, 5.1.3 Limitations of Privilege Levels, 5…

- - - - Privilege level
      - Role-based CLI
    - - User EXEC mode (level 1): Basic access, user-level commands.
      - Privileged EXEC mode (level 15): Full access, all commands available.
    - - Level 0: Minimal commands (disable, enable, exit, help, logout)
      - Level 1: Default login level, read-only access.
      - Levels 2-14: Customizable, commands can be assigned to these levels.
      - Level 15: Full control, configuration and command execution.
- - - - Defines a specific set of CLI commands per user
      - Controls access to ports, interfaces, slots
      - Prevents unauthorized configuration changes or information access
    - - Introduced in Cisco IOS Release 12.3(11)T
      - Provides more granular access than privilege levels
      - Controls which commands are available to specific roles
      - Different views for different users
    - - Prevents unauthorized CLI command execution
      - Minimizes downtime
    - - Simplifies router complexity by limiting commands to authorized users
      - Easier command identification
  - - - Step 1: Enable AAA
        
        Command: aaa new-model
      - Step 2: Create a View
        
        Command: parser view view-name
      - Step 3: Assign a Secret Password
        
        Command: secret password
      - Step 4: Assign Commands to a View
        
        Command: commands parser-mode {include | include-exclusive | exclude} [all] [interface interface-name | command]
      - Step 5: Exit Configuration
        
        Command: exit