Privilege Levels Overview

Different groups of commands are associated with privilege levels (Table 68). You can set enable passwords to allow users to access commands at different privilege levels.

Table 68: Commands Available at Different Privilege Levels

Privilege Level

Commands Available

0

help, exit, enable, and disable commands

1

User Exec commands plus commands at level 0

5

Privileged Exec show commands plus commands at levels 0 and 1

10

All commands except support commands

15

Support commands that Juniper Networks Technical Support may provide and all other commands

To maximize security and usability, set different passwords for levels 1, 5, 10, and 15. By default, no enable passwords exist.

Accessing Privilege Levels

If users have access to the console, they automatically have access to privilege level 0. To access higher levels of privilege, they must enter the enable privilege-level command. When users specify a privilege level, the system determines whether there is a password at that level. If there is not, the system prompts the user for the password for the lower level closest to the requested level.