How to Configure Local Username Database in Cisco IOS:

Task 1: Configure two user accounts (admin & user) & give the administrative access admin & restricted access to user. to

Step 1: Create two users as mention on Task 1. R1(config)#username admin privilege 15 password ccnp R1(config)#username user privilege 10 password ccna

Step 2: Enabling Lines to use the Local Authentication Database. a. On Console Port: R1(config)#line console 0 R1(config-line)#login local

b. On Auxiliary Port: R1(config)#line aux 0 R1(config-line)#login local

c. On Virtual Terminal Port: R1(config)#line vty 0 1869 R1(config-line)#login local

Step 3: Login to Router using Admin account. a. Type Username & Password

b. Check the Username: R1#show users

c. Check the Privilege Level of the Current User. R1#show privilege

Note: We can access the admin user with unrestricted commands, because privilege level of admin is 15 which mean admin can access all the commands supported by the Cisco Router. Let see the user account.

Step 4: Login to Router using user account. a. Type Username & Password

b. Check the Username:

c. Check the Privilege Level of the Current User.

On the user, when I am trying to enter in the global configuration mode, I am getting an error message. This is because user does not have the privilege to access that command.

We can give customize permission to user to access commands. User can access those commands which are permitted by the admin. Let login to the Router using Admin Account:

Step 5: Assign commands to privilege exec mode: R1(config)#privilege exec level 10 configure terminal R1(config)#privilege exec level 10 show running-config R1(config)#privilege exec level 10 show startup-config

Step 6: Assign commands to privilege configure mode: R1(config)#privilege configure level 10 router rip R1(config)#privilege configure level 10 interface fastethernet

Step 7: Assign commands to privilege router mode: R1(config)#privilege router level 10 network

Step 8: Assign commands to privilege router mode: R1(config)#privilege router level 10 network

Step 9: Assign commands to privilege interface mode: R1(config)#privilege interface level 10 ip address

Now login to the router using user & apply the above command. It will successfully execute. But commands apart from that will not execute.