Command Levels

The system adopts a hierarchical protection mode that has 16 command levels. You can perform refined management based on authority through command levels.

By default, commands are registered as follows:

• Level 0-Visit level: Commands of this level include commands of network diagnosis tool (such as ping and tracert) and commands that start from the local device and visit external device (including Telnet client side, SSH client side).

• Level 1-Monitoring level: Commands of this level, including the display commands, are used for system maintenance and fault diagnosis.

• Level 2-Configuration level: Commands of this level are service configuration commands that provide direct network service to the user, including routing and network layer commands.

• Level 3-Management level: Commands of this level are commands that influence the basic operation of the system and provide support to the service. They include file system commands, FTP commands, TFTP commands downloading commands, configuration file switching commands, power supply control commands, backup board control commands, user management commands, level setting commands, system parameter setting commands, and debugging commands that used for fault diagnosis.

Not all display commands are of the monitoring level. For example, the display current-configuration and display saved-configuration commands are of the management level. For the level of a command, see the Command Reference.

To implement efficient management, you can increase the command levels to 0-15.

• The default command level may be higher than the command level defined according to the command rules in application.

• Login users have the same 16 levels as the command levels. The login users can use only the command of the levels that are equal to or lower than their own levels.