H3C S3100-52P Operation Manual page 27

Operation Manual – CLI
H3C S3100-52P Ethernet Switch
Follow these steps to set a password for use level switching:
Enter system view
Set the super password
for user level switching
III. Adopting HWTACACS authentication for user level switching
To implement HWTACACS authentication for user level switching, a level-3 user must
perform the commands listed in the following table to configure the HWTACACS
authentication scheme used for low-to-high user level switching. With HWTACACS
authentication enabled, you can pass the HWTACACS authentication successfully only
after you provide the right user name and the corresponding password as prompted.
Note that if you have passed the HWTACACS authentication when logging in to the
switch, only the password is required.
The following table lists the operations to configure HWTACACS authentication for user
level switching, which can only be performed by Level-3 users.
Follow these steps to set the HWTACACS authentication scheme for user level
switching:
Enter system view
Enter ISP domain view
Set the HWTACACS
authentication scheme
for user level switching
Note:
When setting the HWTACACS authentication scheme for user level switching using the
authentication super hwtacacs-scheme command, make sure the HWTACACS
authentication scheme identified by the hwtacacs-scheme-name argument already
exists. Refer to AAA Operation for information about HWTACACS authentication
scheme.
IV. Switching to a specific user level
Follow these steps to switch to a specific user level:
To do...
system-view
super password [ level
level ] { cipher | simple }
password
To do... Use the command...
system-view
domain domain-name
authentication super
hwtacacs-scheme
hwtacacs-scheme-name
Use the command...
1-6
Chapter 1 CLI Configuration
Remarks
—
Required
By default, the super
password is not set.
Remarks
—
—
Required
By default, the HWTACACS
authentication scheme for user
level switching is not set.