R3204P16-HP Load Balancing Module System Management Command Reference-6PW101

126
If a level is not specified, the command switches the user privilege level to 3. Command levels include four
privileges: visit (0), monitor (1), system (2), and manage (3). You can assign a privilege level according
to the user’s need. When logging in to the switch, the user can access the assigned level and all levels
below it.
Related commands: super password.
Examples
# Switch to user privilege level 2 (The current user privilege level is 3.).
<Sysname> super 2
User privilege level is 2, and only those commands can be used
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
# Switch the user privilege level back to 3 (switching password 123 has been set. If no password is set,
the user privilege level cannot be switched to 3.).
<Sysname> super 3
Password:
User privilege level is 3, and only those commands can be used
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
super authentication-mode
Syntax
super authentication-mode { local | scheme } *
undo super authentication-mode
View
System view
Default level
2: System level
Parameters
local: Authenticates a user by using the local password set with the super password command. When no
password is set with the super password command, two results can occur: The privilege level switch
succeeds if the user is logged in through the console port, or the AUX port used as the console port. The
switch fails if the user logs in through any of the AUX, or VTY user interfaces or inputs an incorrect switch
password.
scheme: AAA authentication. For more information about AAA, see Security Configuration Guide.
local scheme: First local and then scheme, which means to authenticate a user by using the local
password first. If no password is set for the user logged in through the console port, the privilege level
switch succeeds. If no password is set for the user logged in through any of the AUX or VTY user
interfaces, the AAA authentication is performed.
scheme local: First scheme and then local, which means that AAA authentication is performed first. If the
AAA configuration is invalid (the domain parameters or authentication scheme are not configured) or the
server does not respond, the local password authentication is performed.