3Com E4500-24 Cli Configuration Manual page 5

can switch to a higher level temporarily; when the administrators need to leave for a while or ask
someone else to manage the device temporarily, they can switch to a lower privilege level before they
leave to restrict the operation by others.
The high-to-low user level switching is unlimited. However, the low-to-high user level switching requires
the corresponding authentication. Generally, two authentication modes are available: the super
password authentication mode and HWTACACS authentication mode.
Complete the following tasks to configure user level switching:
The administrator configures
the user level switching
authentication policies
The user switches user level
after logging in
Specifying the authentication mode for user level switching
The low-to-high user level switching requires the corresponding authentication. The super password
authentication mode and HWTACACS authentication mode are available at the same time to provide
authentication redundancy.
The configuration of authentication mode for user level switching is performed by Level-3 users
(administrators).
Follow these steps to specify the authentication mode for user level switching:
To do...
Enter system view
Enter user interface view
Super password
authentication
HWTACACS
authentication
Super password
authentication preferred
Specify the
(with the HWTACACS
authentication
authentication as the
mode for user
backup authentication
level switching
mode)
HWTACACS
authentication preferred
(with the super password
authentication as the
backup authentication
mode)
Task
Specifying the authentication mode for user level
switching
Adopting super password authentication for user
level switching
Adopting HWTACACS authentication for user level
switching
Switching to a specific user level
Use the command...
system-view
user-interface [ type ]
first-number [ last-number ]
super authentication-mode
super-password
super authentication-mode
scheme
super authentication-mode
super-password scheme
super authentication-mode
scheme super-password
1-4
Remarks
Optional
Required
Required
Required
Remarks
—
—
Optional
These
configurations will
take effect on the
current user
interface only.
By default, super
password
authentication is
adopted for user
level switching.