3Com S7906E - Switch, Configuration Manual

Page: 2345 / 2621

1-16
To do… Use the command… Remarks
Set the authentication mode for
user privilege level switch super authentication-mode
{ local | scheme } *
Optional
local by default.
Configure the password for
user privilege level switch
super password [ level
user-level ] { simple | cipher }
password
Required
By default, no password is
configured.
If AAA authentication is used, you need to configure AAA first. For introduction and configuration of AAA,
refer to AAA Configuration in the Security Volume .
z
When you configure the password for switching the user privilege level with the super password
command, the user privilege level is 3 if no user privilege level is specified.
z
The password for switching the user privilege level can be displayed in both cipher text and simple
text. You are recommended to adopt the former as the latter is easily cracked.
z
The timeout time of AAA authentication is 120 seconds, after that, the AAA authentication is
considered as no response.
z
The privilege level switch fails after three consecutive unsuccessful password attempts.
Switching user privilege level
To avoid misoperations, the administrators are recommended to log in to the device by using a lower
privilege level and view device operating parameters, and when they have to configure or maintain the
device, they can switch to a higher level temporarily; when the administrators need to leave for a while
or ask someone else to manage the device temporarily, they can switch to a lower privilege level before
they leave to restrict the operation by others.
Follow the step below to switch the user privilege level:
To do… Use the command… Remarks
Switch the user privilege level super [ level ]
Required
Available in user view
When logging in to the device,
a user has a user privilege
level, which is decided by user
interface or authentication user
level.