10
Related commands
•
super password
•
super authentication-mode
super authentication-mode
Use
super authentication-mode
to set the authentication mode for user privilege level switching.
Use
undo super authentication-mode
to restore the default.
Syntax
super authentication-mode
{
local
|
scheme
}
*
undo super authentication-mode
Default
The authentication mode for the user privilege level switching is
local
.
Views
System view
Default command level
2: System level
Parameters
local
: Uses the local password set with the
super password
command for user privilege level switching
authentication. If no password is set with the command, the system allows a console port user to switch
the privilege level without authentication, but denies the switching requests of VTY users.
scheme
: Uses AAA for user privilege level switching authentication. For more information about AAA,
see
Security Configuration Guide
.
local scheme
: Uses the local password, if configured, for user privilege level switching authentication. If
the password is not configured, the system allows a console port user to switch the privilege level but uses
AAA to authenticate VTY users.
scheme local
: Uses AAA for user privilege level switching authentication. If the AAA configuration is
incomplete or invalid or the server does not respond, the system uses the local password for the
authentication.
Examples
# Set the authentication mode for the user privilege level switching to
local
.
<Sysname> system-view
[Sysname] super authentication-mode local
# Set the authentication mode for the user privilege level switching to
scheme local
.
<Sysname> system-view
[Sysname] super authentication-mode scheme local
Related commands
super password