H3C Technologies H3C S3600 Series Switches - Manual (Page 90)

9-2
To do… Use the command… Remarks
Enter system view system-view —
Enter user interface view
user-interface [ type ]
first-number [ last-number ]
—
Super password
authentication
super
authentication-mode
super-password
HWTACACS authentication
super
authentication-mode
scheme
Super password
authentication preferred
(with the HWTACACS
authentication as the backup
authentication mode)
super
authentication-mode
super-password scheme
Specify the
authentication
mode for user
level switching
HWTACACS authentication
preferred (with the super
password authentication as
the backup authentication
mode)
super
authentication-mode
scheme super-password
Optional
These
configurations
will take effect on
the current user
interface only.
By default, super
password
authentication is
adopted for user
level switching.
When both the super password authentication and the HWTACACS authentication are specified, the
device adopts the preferred authentication mode first. If the preferred authentication mode cannot be
implemented (for example, the super password is not configured or the HWTACACS authentication
server is unreachable), the backup authentication mode is adopted.
Adopting super password authentication for user level switching
With the super password set, you can pass the super password authentication successfully only when
you provide the super password as prompted. If no super password is set, the system prompts
“%Password is not set” when you attempt to switch to a higher user level. In this case, you cannot pass
the super password authentication.
For example, after the administrator configures the super password level 3 simple 123 command,
when users of level 0 through level 2 want to switch to user level 3, they need to input super password
123.
The following table lists the operations to configure super password authentication for user level
switching, which can only be performed by level-3 users (administrators).