1-2Command HierarchyCommand Level and User Privilege LevelCommand levelThe S5600 series Ethernet switches use hierarchical command protection for command lines, so as toinhibit users at lower levels from using higher-level commands to configure the switches.Based on user privilege, commands are classified into four levels, which default to:z Visit level (level 0): Commands at this level are mainly used to diagnose network, and they cannotbe saved in configuration file. For example, ping, tracert and telnet are level 0 commands.z Monitor level (level 1): Commands at this level are mainly used to maintain the system anddiagnose service faults, and they cannot be saved in configuration file. Such commands includedebugging and terminal.z System level (level 2): Commands at this level are mainly used to configure services. Commandsconcerning routing and network layers are at this level. These commands can be used to providenetwork services directly.z Manage level (level 3): Commands at this level are associated with the basic operation modulesand support modules of the system. These commands provide support for services. Commandsconcerning file system, FTP/TFTP/XModem downloading, user management, and level setting areat this level.User privilege levelUsers logged into the switch fall into four user privilege levels, which correspond to the four commandlevels respectively. Users at a specific level can only use the commands at the same level or lowerlevels.By default, the Console user (a user who logs into the switch through the Console port) is a level-3 user,and Telnet users are level-0 users.You can use the user privilege level command to set the default user privilege level for users logging inthrough a certain user interface. For details, refer to Login Operation.If a user logs in using AAA authentication, the user privilege level depends on the configuration of theAAA scheme. For details, refer to AAA Operation.Modifying the Command LevelModifying the Command LevelCommands fall into four levels: visit (level 0), monitor (level 1), system (level 2), and manage (level 3).By using the following command, the administrator can change the level of a command in a specificview as required.Follow these steps to set the level of a command in a specific view:
