[네트워크] 시스코(Cisco) privilege 권한 설정 컨피그, 주의사항

[네트워크] 시스코(Cisco) privilege 권한 설정 컨피그, 주의사항

 

 

- privilege 권한 레벨 설명

Privilege Level Security

Cisco IOS devices use privilege levels for more granular security and Role-Based Access Control (RBAC) in addition to usernames and passwords. There are 16 privilege levels of admins access, 0-15, on the Cisco router or switch that you can configure to provide customized access control. With 0 being the least privileged and 15 being the most privileged. These are three privilege levels the Cisco IOS uses by default:

• Level 0 – Zero-level access only allows five commands- logout, enable, disable, help and exit.
• Level 1 – User-level access allows you to enter in User Exec mode that provides very limited read-only access to the router.
• Level 15 – Privilege level access allows you to enter in Privileged Exec mode and provides complete control over the router.

 

 

 

- privilege 권한 설정 주의사항

no aaa new-model  <- 이 명령어가 있을 때 line vty 에서 login local 안됨
no aaa authentication login default local

-> 두개의 명령어 뺐을 때  privilege 정상작동, line vty 에서 login local 가능


aaa authorization exec default local 
->입력시 aaa new-model에서  privileage level 유저 사용 가능

 

- privilege 명령어 제거
privilege exec reset (제거하고싶은 명령어 line)

반응형

- 권한 5로 RO 설정 명령어 예시

privilege exec all level 5 show running-config
privilege exec all level 5 show
privilege exec level 15 connect
privilege exec level 15 telnet
privilege exec level 5 show processes memory
privilege exec level 5 show processes cpu
privilege exec level 5 show processes
privilege exec level 5 show issu
privilege exec level 5 show version
privilege exec level 1 show issu
privilege exec level 1 show environment all
privilege exec level 1 show environment
privilege exec level 5 show identity
privilege exec level 1 show id-manager
privilege exec level 5 show idb
privilege exec level 1 show tech-support
privilege exec level 5 show idmgr
privilege exec level 1 show ip route
privilege exec level 1 show ip
privilege exec level 1 show standby brief
privilege exec level 1 show standby
privilege exec level 1 show processes cpu
privilege exec level 1 show processes memory
privilege exec level 1 show processes
privilege exec level 1 show version
privilege exec level 5 show logging
privilege exec level 5 show running-config full
privilege exec level 5 show running-config view
privilege exec level 5 show running-config view full