User Credentials and Privilege Level

Data is collected from Cisco UBE via CLI and SNMP interfaces. To obtain data via CLI, a user name and password must be provided that has sufficient privileges to run the command 'show dial-peer voice summary'. Of the three current default privilege levels available, only one is supported for monitoring, i.e. 'privilege level 15',  which allows the user to run the 'show dial-peer voice summary' command without the 'enable' command.

The 'administrator' credentials can be used to access the CUBE router. However, depending upon individual corporate policies, using the 'administrator' credentials for this purpose may not be permissible. In this case, the following procedures can be used to give access to the CUBE router by way of alternative user credentials.

The Monitoring Server requires a user with privilege 'EXEC level 15' (the highest level), this is so that all enable-level commands are included at the router# prompt.

Adjust Privilege Level for an Existing User

Any existing user credentials can be used to access the CUBE router, providing that the user has the required privilege level (i.e. 15).

To check the privilege level for a user, log in as the user then run the following command:

router# show privilege
Current privilege level is 15
router#

To adjust the privilege level that is required to run the 'show dial-peer voice summary' command, use the following steps:

Log on to the Cisco UBE via CLI as 'administrator'.

Go into 'configuration' terminal mode:

router > enable
router# configure terminal

Enter the following commands:

router(config)# privilege exec level 15 show dial-peer voice summary

This setting will need to match the privilege level required, i.e. 15.

When finished press CTRL+Z to escape 'configuration' mode and then type 'logout' to exit.

Create a New User

Alternatively, a new user can be created. This can be done either:

  • For large enterprise organizations that are using RADIUS or TACAS for user management, then a create new user account with READ ONLY access to the required commands.

OR

  • Directly on the device, using the following procedure:

Log on to the Cisco UBE via CLI as 'administrator'.

Go into 'configuration' terminal mode:

router > enable
router# configure terminal

Add the new user name with the following entry and then press Enter:

router(config)# username <new-user-name>

To assign a password, enter the following command and then press Enter:

router(config)# username <new-user-name> password <password>

To assign a privilege level of '15' enter the following command and then press Enter:

router(config)# username <new-user-name> privilege 15

This setting will need to match the privilege level required, i.e. 15.

When finished press CTRL+Z to escape 'configuration' mode and then type 'logout' to exit.

  

Provide feedback on this article