177
super authentication-mode
Syntax
super authentication-mode
{
local
|
scheme
}
*
undo super authentication-mode
View
System view
Default Level
2: System level
Parameters
local
: Authenticates a user by using the local password set with the
super password
command. In this case, when no password is set with the
super password
command,
privilege level switch succeeds if the user is logged in from the console port (here
indicates the console port or the AUX port used as the console port), and the switch
fails if the user is logged in from any of the AUX or VTY user interfaces or inputs an
incorrect switch password.
scheme
: AAA authentication. For more information about the AAA, see
AAA
in the
Security Configuration Guide
.
local scheme
: First
local
and then
scheme
. Authenticates a user by using the local
password first, and if no password is set, for the user logged in from the console port, the
privilege level switch succeeds; for the user logged in from any of the AUX or VTY user
interfaces, the AAA authentication is performed.
scheme local
: First
scheme
and then
local.
AAA authentication is performed first, and if
the AAA configuration is invalid (domain parameters or authentication scheme are not
configured) or the server does not respond, the authentication requiring the local
password is performed.
Description
Use the
super authentication-mode
command to set the authentication mode for user
privilege level switch.
Use the
undo super authentication-mode
command to restore the default.
By default, the authentication mode for user privilege level switch is
local
.
Related commands:
super password
.
Examples
Example 1:
Set the authentication mode for user privilege level switch to
local
.
