69
super authentication-mode
Use
super authentication-mode
to set an authentication mode for temporary user role
authorization.
Use
undo super authentication-mode
to restore the default.
Syntax
super authentication-mode
{
local
|
scheme
}
*
undo super authentication-mode
Default
Local password authentication applies.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
local
: Enables local password authentication.
scheme
: Enables remote AAA authentication.
Usage guidelines
For local password authentication, use the
super password
command to set a password.
For remote AAA authentication, set the username and password on the RADIUS or HWTACACS
server.
If you specify both
local
and
scheme
keywords, the keyword first entered in the command takes
precedence, as follows:
•
scheme
local
—Enables remote-then-local authentication mode. The device first performs AAA
authentication for temporary user role authorization. If the remote HWTACACS or RADIUS
server does not respond, or if the AAA configuration on the device is invalid, local password
authentication is performed.
•
local
scheme
—Enables local-then-remote authentication mode. The device first performs
local password authentication. If no password is configured for the user role, the device
performs remote authentication.
For more information about AAA, see
Security Configuration Guide
.
Examples
# Enable local-only authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode local
# Enable remote-then-local authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode scheme local
Related commands
authentication super
(
Security Command Reference
)
super password
