Operation Manual – CLI
H3C S3100 Series Ethernet Switches
Chapter 1 CLI Configuration
1-6
Note:
When setting the HWTACACS authentication scheme for user level switching using the
authentication super hwtacacs-scheme
command, make sure the HWTACACS
authentication scheme identified by the
hwtacacs-scheme-name
argument already
exists. Refer to
AAA Operation
for information about HWTACACS authentication
scheme.
IV. Switching to a specific user level
Table 1-6
Switch to a specific user level
Operation
Command
Remarks
Switch to a specified user
level
super
[
level
]
Required
Execute this command in user view.
Note:
z
If no user level is specified in the
super password
command or the
super
command, level 3 is used by default.
z
For security purpose, the password entered is not displayed when you switch to
another user level. You will remain at the original user level if you have tried three
times but failed to enter the correct authentication information.
V. Configuration example
After a general user telnets to the switch, his/her user level is 0. Now, the network
administrator wants to allow general users to switch to level 3, so that they are able to
configure the switch.
1)
Super password authentication configuration example
# A level 3 user sets a switching password for user level 3.
<Sysname> system-view
[Sysname] super password level 3 simple 123
# A general user telnets to the switch, and then uses the set password to switch to user
level 3.
<Sysname> super 3
Password:
User privilege level is 3, and only those commands can be used
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE