The factory default privilege level for the console line and all vty lines is 1. However, you can use the privilege level command in Line Configuration mode to set the default login privilege for the console line or any number of vty lines.
To change the default privilege level:
- host1(config)#line console 0
- host1(config-line)#
or on one or more vty lines
- host1(config)#line vty 0 12
- host1(config-line)#
![]() |
Note: The latter command configures vty lines 0 to 12. |
- host1(config-line)#privilege level 5
The default privilege level for the specified line (or lines) changes. The new values take effect immediately for any new users. If using the console line, you must exit out of the CLI and reestablish a connection before the default takes effect.
If you are validating through RADIUS or TACACS+ and the server specifies an enable level, that enable level takes precedence over the line privilege level.
privilege level
- host1(config-line)#privilege level 5
![]() |
Note: You must access the CLI at privilege level 15 to view or use this command. |