3Com 4210 9-Port Configuration Manual page 41

can switch to a higher level temporarily; when the administrators need to leave for a while or ask
someone else to manage the device temporarily, they can switch to a lower privilege level before they
leave to restrict the operation by others.
The high-to-low user level switching is unlimited. However, the low-to-high user level switching requires
the corresponding authentication. Generally, two authentication modes are available: the super
password authentication mode and HWTACACS authentication mode.
Table 5-2 User level switching configuration task list
The administrator configures
the user level switching
authentication policies
The user switches user level
after logging in
Specifying the authentication mode for user level switching
The low-to-high user level switching requires the corresponding authentication. The super password
authentication mode and HWTACACS authentication mode are available at the same time to provide
authentication redundancy.
The configuration of authentication mode for user level switching is performed by Level-3 users
(administrators), as described in
Table 5-3 Specify the authentication mode for user level switching
Operation
Enter system view
Enter user interface view
Super password
authentication
HWTACACS
authentication
Super password
authentication preferred
Specify the
(with the HWTACACS
authentication
authentication as the
mode for user
backup authentication
level switching
mode)
HWTACACS
authentication preferred
(with the super password
authentication as the
backup authentication
mode)
Operation
Specifying the authentication mode for user level
switching
Adopting super password authentication for user
level switching
Adopting HWTACACS authentication for user level
switching
Switching to a specific user level
Table 5-3.
system-view
user-interface [ type ]
first-number [ last-number ]
super authentication-mode
super-password
super authentication-mode
scheme
super authentication-mode
super-password scheme
super authentication-mode
scheme super-password
5-4
Command
—
—
Optional
These
configurations will
take effect on the
current user
interface only.
By default, super
password
authentication is
adopted for user
level switching.
Remarks
Optional
Required
Required
Required
Remarks