Switching User Level - H3C S5100-SI Operation Manual

It is recommended not to change the level of a command arbitrarily, for it may cause inconvenience
to maintenance and operation.
When you change the level of a command with multiple keywords, you should input the keywords
one by one in the order they appear in the command syntax. Otherwise, your configuration will not
take effect.
Configuration example
The network administrator (a level 3 user) wants to change some TFTP commands (such as tftp get)
from level 3 to level 0, so that general Telnet users (level 0 users) are able to download files through
TFTP.
# Change the tftp get command in user view (shell) from level 3 to level 0. (Originally, only level 3 users
can change the level of a command.)
<Sysname> system-view
[Sysname] command-privilege level 0 view shell tftp
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get bootrom.btm
After the above configuration, general Telnet users can use the tftp get command to download file
bootrom.btm and other files from TFTP server 192.168.0.1 and other TFTP servers.

Switching User Level

After logging into the switch, users can change their current user levels through a command. Note that:
If a switching password is set for a specific user level by the super password command, all users
must enter the password correctly when they switch from lower user levels to this level (if a wrong
password is entered, they will remain at their original levels).
If no switching password is set for a specific user level, the Console user can directly switch to the
level, while the Telnet users at lower levels will fail to switch to the level (they will remain at their
original levels) and the information like the following will be displayed: % Password is not set.
Setting a user level switching password
Table 5-1 Set a password for use level switching
Operation
Enter system view
Set the super password for
user level switching
Command
system-view
super password [ level level ]
{ cipher | simple } password
5-3
Remarks
—
Required
By default, the super password
is not set.