How to login as privilege-8 and use "Enable" to access privilege-15 ?

Steven_zhangCreated at:Dec 11, 2019 11:18:20Updated at:Dec 11, 2019 11:18:26

Model Name: ECS4620 series

Firmware Version: v1.2.2.19

 

1. Set privilege-8, privilege-15 accounts and enable password in tacacs Server.

mceclip0.png

 

2. Then, set following command:

Console(config)#tacacs-server 1 host [tacacs server ip] key [tacacs server's key]
Console(config)#authentication login tacacs local
Console(config)#authentication enable tacacs local
Console(config)#line console
Console(config-line-console)#authorization exec default

mceclip1.png

 

3. Use privilege-8 account login to switch, and use enable to access privilege-15.

mceclip2.png

PS. If you want use telnet login, you need to use “authorization exec default” in line vty, too.

Console#show privilege
Current privilege level is 15
Console#configure
Console(config)#line vty
Console(config-line-vty)#authorization exec default

mceclip3.png