Super Authentication-Mode - H3C WX Series Command Reference Manual

super authentication-mode

Syntax
super authentication-mode { local | scheme } *
undo super authentication-mode
View
System view
Default Level
2: System level
Parameters
local: Authenticates a user by using the local password set with the super password
command. In this case, when no password is set with the super password command,
privilege level switch succeeds if the user is logged in from the console port (here
indicates the console port or the AUX port used as the console port), and the switch
fails if the user is logged in from any of the AUX or VTY user interfaces or inputs an
incorrect switch password.
scheme: AAA authentication. For more information about the AAA, see AAA in the
Security Configuration Guide.
local scheme: First local and then scheme. Authenticates a user by using the local
password first, and if no password is set, for the user logged in from the console port, the
privilege level switch succeeds; for the user logged in from any of the AUX or VTY user
interfaces, the AAA authentication is performed.
scheme local: First scheme and then local. AAA authentication is performed first, and if
the AAA configuration is invalid (domain parameters or authentication scheme are not
configured) or the server does not respond, the authentication requiring the local
password is performed.
Description
Use the super authentication-mode command to set the authentication mode for user
privilege level switch.
Use the undo super authentication-mode command to restore the default.
By default, the authentication mode for user privilege level switch is local.
Related commands: super password.
Examples
Example 1:
Set the authentication mode for user privilege level switch to local.
177