9-9To do… Use the command… RemarksEnter system view system-view —Enable the command aliasfunction command-alias enableRequiredDisabled by default, that is, youcannot configure commandaliases.Configure command aliases command-alias mappingcmdkey aliasRequiredNot configured by default.Configuring User Privilege Levels and Command LevelsIntroductionTo restrict the different users’ access to the device, the system manages the users by their privilegelevels. User privilege levels correspond to command levels. After users at different privilege levels login, they can only use commands at their own, or lower, levels. All the commands are categorized intofour levels, which are visit, monitor, system, and manage from low to high, and identified respectivelyby 0 through 3. Table 9-3 describes the levels of the commands.Table 9-3 Default command levelsLevel Privilege Description0 VisitInvolves commands for network diagnosis and commands for accessingan external device. Commands at this level are not allowed to be savedafter being configured. After the device is restarted, the commands atthis level will be restored to the default settings. Commands at this levelinclude ping, tracert, telnet and ssh2.1 MonitorIncludes commands for system maintenance and service fault diagnosis.Commands at this level are not allowed to be saved after beingconfigured. After the device is restarted, the commands at this level willbe restored to the default settings. Commands at this level includedebugging, terminal, refresh, reset, and send.2 SystemProvides service configuration commands, including routing andcommands at each level of the network for providing services. Bydefault, commands at this level include all configuration commandsexcept for those at manage level.3 ManageInfluences the basic operation of the system and the system supportmodules for service support. By default, commands at this level involvefile system, FTP, TFTP, Xmodem command download, usermanagement, level setting, as well as parameter setting within a system(the last case involves those non-protocol or non RFC provisionedcommands).Configuring user privilege levelUser privilege level can be configured by using AAA authentication parameters or under a userinterface.1) Configure user privilege level by using AAA authentication parametersIf the user interface authentication mode is scheme when a user logs in, and username and passwordare needed at login, then the user privilege level is specified in the configuration of AAA authentication.
