Adopting Super Password Authentication For User Level Switching - H3C S5600 Series Operation Manual

Enter user interface view
Specify the
authentication
mode for user level
switching
When both the super password authentication and the HWTACACS authentication are specified, the
device adopts the preferred authentication mode first. If the preferred authentication mode cannot be
implemented (for example, the super password is not configured or the HWTACACS authentication
server is unreachable), the backup authentication mode is adopted.

Adopting super password authentication for user level switching

With the super password set, you can pass the super password authentication successfully only when
you provide the super password as prompted. If no super password is set, the system prompts
"%Password is not set" when you attempt to switch to a higher user level. In this case, you cannot pass
the super password authentication.
For example, after the administrator configures the super password level 3 simple 123 command,
when users of level 0 through level 2 want to switch to user level 3, they need to input super password
123.
The following table lists the operations to configure super password authentication for user level
switching, which can only be performed by level-3 users (administrators).
Follow these steps to set a password for use level switching:
To do...
Enter system view
Set the super password for user
level switching
To do...
Super password authentication
HWTACACS authentication
Super password authentication
preferred (with the HWTACACS
authentication as the backup
authentication mode)
HWTACACS authentication
preferred (with the super
password authentication as the
backup authentication mode)
Use the command...
system-view
super password [ level level ]
{ cipher | simple } password
Use the command...
user-interface [ type ]
first-number [ last-number ]
super authentication-mode
super-password
super authentication-mode
scheme
super authentication-mode
super-password scheme
super authentication-mode
scheme super-password
—
Required
The configuration will take effect on
all user interfaces.
By default, the super password is
not set.
9-2
Remarks
—
Optional
These
configurations will
take effect on the
current user
interface only.
By default, super
password
authentication is
adopted for user
level switching.
Remarks