ccna 200-301 official cert guide, volume 2

ccna 200-301 official cert guide, volume 2.To switch to level 10, use enable 10 and the correct password.From level 10 to 15, use the enable command, or assume 15 if no privilege level is specified.2.2 Assigning Administrative Roles 37 It is sometimes easy for users to forget what level they are currently at, and you can use the showprivilege command to display and determine the current level. Remember that higher levels automatically inherit all lower level commands.2.2.1.5 Limiting privilege levelsWhile assigning privilege levels can provide flexibility, some enterprises find it inapplicable based on the following limitations. Access to specific interfaces, ports, logical interfaces, and slots on the router cannot be controlled. Low-level commands can always be executed at high levels. High-level commands are not available to low-level users. In assigning commands with multiple keywords to specific levels, all commands associated with the first keyword are assigned to the samelevel. For example, the showip route command. However, the biggest limitation is that if an administrator needs to create a user account that can access almost all commands, then a privilege exec statement must be configured for each command that can be used below level 15. This is a very tedious task.2.2.2 Configuring Role-Based CLI Access2.2.2.1 Role-Based CLI AccessTo provide greater flexibility than the privilege level, Cisco introduced role-based CLI access in CiscoIOS Release 12.3(11)T. This feature provides more granular and precise control over the commands used by a specific role. Role-based CLI access enables network administrators to create different router configuration views for different users, with each view defining the commands available to each user.Security Role-based CLI access enhances the security of the device by defining the set of CLI commands that can be used for specific users. In addition, administrators can control user access to specific ports, logical interfaces, and slots on the router. This prevents users from accidentally or intentionally modifying the configuration or gaining access to information that should not be available. Availability