Switching User Privilege Level - HP A5830 Series Configuration Manual

Task...
3. Configure the authentication
mode for any user who uses
the current user interface to
log in to the switch.
4. Configure the privilege level of
users logged in through the
current user interface.
Example of configuring a user privilege level under a user interface
# Perform no authentication on users logged in to the switch through Telnet, and specify their privilege
level as 1. (Use no authentication mode in a secure network environment.)
<Sysname> system-view
[Sysname] user-interface vty 0 15
[Sysname-ui-vty0-15] authentication-mode none
[Sysname-ui-vty0-15] user privilege level 1
# Authenticate users logged in to the switch through Telnet, verify their password, and specify their user
privilege level as 2.
<Sysname> system-view
[Sysname] user-interface vty 0 15
[Sysname-ui-vty1] authentication-mode password
[Sysname-ui-vty0-15] set authentication password cipher 12345678
[Sysname-ui-vty0-15] user privilege level 2
By default, Telnet users can use level 0 commands after passing authentication. After the configuration
above is completed, when users log in to the switch through Telnet, they must enter password 12345678,
and then they can use level 0, 1, and 2 commands.

Switching user privilege level

CAUTION:
•
Specifying the simple keyword saves the password in plain text, which is less secure than specifying the cipher
keyword, which saves the password in cipher text.
• If the user logs in from the AUX user interface (console port), the privilege level can be switched to a higher level,
although the authentication mode is local, and no user privilege level password is configured.
If no user privilege level is specified when you configure the password for switching the user privilege
level with the super password command, the user privilege level defaults to 3.
Users can switch to a different user privilege level temporarily without logging out and terminating the
current connection.
After the privilege level switch, users can continue to configure the switch without logging back in, but the
commands that they can execute have changed. For example:
If the current user privilege level is 3, the user can configure system parameters.
•
Command...
authentication-mode { none |
password }
user privilege level level
15
Remarks
Optional.
By default, the authentication mode for
VTY user interfaces is password, and no
authentication is needed for AUX login
users.
Optional.
By default, the user privilege level for
users logged in through the AUX user
interface is 3, and that for users logged
in through the VTY interfaces is 0.