Enabling CLI access levels

Enable CLI access levels to control the configuration actions of various users.

About this task

Important

Only the RWA user can disable an access level on the switch. You cannot disable the RWA access level on the switch.

The system preserves these configurations across restarts.

Procedure

Enter Global Configuration mode:

enable

configure terminal
Enable an access level:

password access-level WORD<2–8>

Example

Block CLI access to Layer 1:

Switch:1>enable
Switch:1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch:1(config)#no password access-level l1

Variable Definitions

The following table defines parameters for the password access-level command.


Variable	Value
`WORD<2–8>`	Permits or blocks this access level. The available access level values are as follows: l1 — Specifies Layer 1. l2 — Specifies Layer 2. l3 — Specifies Layer 3. ro — Specifies read-only. rw — Specifies read-write. rwa — Specifies read-write-all. To set this option to the default value, use the default operator with the command. By default, the system permits all access levels. To block an access level, use the no operator with the command.