ername GAD password Secret1 Passwords are case-sensitive, and can include spaces. Passwords are displayed in clear text in the configuration, unless the password-encryption service is running. To include an encrypted password without using the password-encryption service, use the secret keyword instead of the password keyword: 1(config)# username GAD secret Secret1 This command results in the following configuration entry: username GAD secret 5 $1$uyU6$6iZp6GLI1WGE1hxGDf0xc/ Every command and user has an associated privilege level. The levels range from 0 to 15. The standard user EXEC mode is level 1. When you enter the command enable, and authenticate with the enable or enable secret password, you change your level to privileged EXEC mode, which is level 15. If you'd like a user to be able to access privileged-level commands without entering the enable password, you can assign a higher privilege level to that user. In other words, configuring a user with a privilege level of 15 removes the need for that user to use the enable password to execute privileged commands: R1 (config)# username GAD privilege 15 Basic (Non-AAA) Authentication When separate commands are entered for the same user (either in the same or sepa- rate command lines), as I've just done with the secret and privilege commands, the parser will combine the commands into a single configuration entry: username GAD privilege 15 secret 5 $1$uyU6$6iZp6GLI1WGE1hxGDfQxc/ When this user logs into the router, he'll be greeted with the privileged # prompt instead of the normal exec prompt: User Access Verification Username: GAD Password: GAD-R1# Another interesting feature of the username command is the ability to assign a com- mand to run automatically when the user authenticates. Here, I've configured the show ip interface brief command to run upon authentication: R1 (config)# username GAD autocommand show ip interface brief When this user logs in, he'll be shown the output from this command, and then promptly disconnected: User Access Verification Usernam