if the privilege level is set for a user with 15 and enable password is set with level 1 what will be the net privilege.will he get the level 15 for unpriv mode and after entering in to priv level will he get level 1?
If the user is set for level 15, they will log in at level 15.
You can have separate enable passwords for various levels. If you want to drop to a lower level, you can use the enable command or the disable command with the number of the level that you want to drop to: "enable 5", "enable 4", "disable 5", etc.
If you want to go to a higher level, you would use the "enable" command, and you would need an enable password configured for the level that you are trying to go to. If you have enable passwords for level 1, 2, and 15, and try to use "enable 8", you will get an error message, because there is no password set for level 8.
If you use the command "enable" without a level set, it assumes level 15. If you have a different enable password set for level 1, you would need to be at a lower level to be required to use the level one password to get to level one.
Basically, you can always go down levels without any authentication, but going up levels will require authentication.
Use "show privilege", "enable" "disable" a few local usernames and local authentication configured on a VTY line for practice.
so here in my case it means the user is having level 15 and he will enter in to priv level 15 when giving en command inspite of configuring as enable password level 1 for the user or he has to go for en 1 ?
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...