10
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
# Switch the user privilege level back to 3 (switching password
123
has been set. If no password is set,
the user privilege level cannot be switched to 3.).
<Sysname> super 3
Password:
User privilege level is 3, and only those commands can be used
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
super authentication-mode
Syntax
super authentication-mode
{
local
|
scheme
}
*
undo super authentication-mode
View
System view
Default level
2: System level
Parameters
local
: Authenticates a user by using the local password set with the
super password
command. When no
password is set with the
super password
command, two results can occur: The privilege level switch
succeeds if the user is logged in through the console port. The switch fails if the user logs in through a VTY
user interface or inputs an incorrect switch password.
scheme
: AAA authentication. For more information about AAA, see
Security Configuration Guide
.
local scheme
: First
local
and then
scheme
, which means to authenticate a user by using the local
password first. If no password is set for the user logged in through the console port, the privilege level
switch succeeds. If no password is set for the user logged in through a VTY user interface, the AAA
authentication is performed.
scheme local
: First
scheme
and then
local
, which means that AAA authentication is performed first. If the
AAA configuration is invalid (the domain parameters or authentication scheme are not configured) or the
server does not respond, the local password authentication is performed.
Description
Use the
super authentication-mode
command to set the authentication mode for user privilege level
switch.
Use the
undo super authentication-mode
command to restore the default.
By default, the authentication mode for the user privilege level switch is
local
.
Related commands:
super password
.
Examples
# Set the authentication mode for the user privilege level switch to
local
.
<Sysname> system-view
[Sysname] super authentication-mode local
