1-3To do… Use the command… RemarksConfigure the level of a command ina specific viewcommand-privilege level level viewview command Requiredz You are recommended to use the default command level or modify the command level under theguidance of professional staff; otherwise, the change of command level may bring inconvenienceto your maintenance and operation, or even potential security problem.z When you change the level of a command with multiple keywords or arguments, you should inputthe keywords or arguments one by one in the order they appear in the command syntax. Otherwise,your configuration will not take effect. The values of the arguments should be within the specifiedranges.z After you change the level of a command in a certain view to be lower than the default level, changethe level of the command used to enter the view accordingly.Configuration exampleThe network administrator (a level 3 user) wants to change some TFTP commands (such as tftp get)from level 3 to level 0, so that general Telnet users (level 0 users) are able to download files throughTFTP.# Change the tftp get command in user view (shell) from level 3 to level 0. (Originally, only level 3 userscan change the level of a command.) system-view[Sysname] command-privilege level 0 view shell tftp[Sysname] command-privilege level 0 view shell tftp 192.168.0.1[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get bootrom.btmAfter the above configuration, general Telnet users can use the tftp get command to download filebootrom.btm and other files from TFTP server 192.168.0.1 and other TFTP servers.Switching User LevelOverviewUsers can switch their user privilege level temporarily without logging out and disconnecting the currentconnection; after the switch, users can continue to configure the device without the need of relogin andreauthentication, but the commands that they can execute have changed.For example, if the current user privilege level is 3, the user can configure system parameters; afterswitching the user privilege level to 0, the user can only execute some simple commands, like ping andtracert, and only a few display commands.The switching of user privilege level is temporary, and effective for the current login; after the user relogsin, the user privilege restores to the original level.To avoid misoperations, the administrators are recommended to log in to the device by using a lowerprivilege level and view device operating parameters, and when they have to maintain the device, they
