R211x-HP Flexfabric 11900 Fundamentals Command Reference

72
Related commands
• authentication super
• super authentication-mode
• super password
super authentication-mode
Use super authentication-mode to set an authentication mode when you obtain the user role that you are
not logged in with.
Use undo super authentication-mode to restore the default.
Syntax
super authentication-mode { local | scheme } *
undo super authentication-mode
Default
Local password authentication applies.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
local: Enables local password authentication.
scheme: Enables remote AAA authentication.
Usage guidelines
For local password authentication, use the super password command to set a password.
For remote AAA authentication, set the username and password on the RADIUS or HWTACACS server.
If you specify both local and scheme keywords, the keyword first entered in the command takes
precedence, as follows:
• scheme local—Enables remote-then-local authentication mode. The device first performs AAA
authentication for temporary user role authorization. If the remote HWTACACS or RADIUS server
does not respond, or if the AAA configuration on the device is invalid, local password
authentication is performed.
• local scheme—Enables local-then-remote authentication mode. The device first performs local
password authentication. If no password is configured for the user role, the device performs remote
authentication.
For more information about AAA, see Security Configuration Guide.
Examples
# Enable local-only authentication for the temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode local