Dear Justin,
to have privilege level 15 permissions granted instantly after ssh login you need to add the following line to your
line cfg:
conf t
line vty 0 4
privilege level 15
end
wr
copy run start
In general it is a good course of action _NOT_ to enbale the SSH access on standard port 22 on your Cisco box as it is
a permanent invitation for those wrong doings who seem to have more spare time than maybe you and I have.....
so how to enable SSH access on a different port from regular standard port 22?
let's say you wish to have your box ssh'd involving port 3210.
conf t
access-list 123 REMARK deny ssh access on std port 22 on line vty 0 4
access-list 123 deny tcp any eq 22 any
ip ssh port 3210 rotary 1
line vty 0 4
rotary 1
access-class 123 in
exit
wr
copy run start
we first define an extended access list in which we prevent any ssh access on standard port 22,
at this time the access-list has no impact yet to the system at all.
we then turn an eye to the non-standard ssh - port 3210, rotary cmd lets you basically define a kind of
port cycling. declaring only the first one binds it to the given port, but that's not all yet.
finally we assign our just to 1 port limited "port-cycle" under line vty 0 4 and bring then access-list 123
into play what only affects ssh access on the given line.
I hope you find the above helpful.
All the best,
David.
