3Com E4500-24, Cli Configuration Manual

Page: 5 / 848

1-4
can switch to a higher level temporarily; when the administrators need to leave for a while or ask
someone else to manage the device temporarily, they can switch to a lower privilege level before they
leave to restrict the operation by others.
The high-to-low user level switching is unlimited. However, the low-to-high user level switching requires
the corresponding authentication. Generally, two authentication modes are available: the super
password authentication mode and HWTACACS authentication mode.
Complete the following tasks to configure user level switching:
Task Remarks
Specifying the authentication mode for user level
switching
Optional
Adopting super password authentication for user
level switching
Required
The administrator configures
the user level switching
authentication policies
Adopting HWTACACS authentication for user level
switching
Required
The user switches user level
after logging in
Switching to a specific user level Required
Specifying the authentication mode for user level switching
The low-to-high user level switching requires the corresponding authentication. The super password
authentication mode and HWTACACS authentication mode are available at the same time to provide
authentication redundancy.
The configuration of authentication mode for user level switching is performed by Level-3 users
(administrators).
Follow these steps to specify the authentication mode for user level switching:
To do… Use the command… Remarks
Enter system view system-view —
Enter user interface view
user-interface [ type ]
first - number [ last-number ]
—
Super password
authentication super authentication-mode
super-password
HWTACACS
authentication super authentication-mode
scheme
Super password
authentication preferred
(with the HWTACACS
authentication as the
backup authentication
mode)
super authentication-mode
super-password scheme
Specify the
authentication
mode for user
level switching
HWTACACS
authentication preferred
(with the super password
authentication as the
backup authentication
mode)
super authentication-mode
scheme super-password
Optional
These
configurations will
take effect on the
current user
interface only.
By default, super
password
authentication is
adopted for user
level switching.