R21xx-HP FlexFabric 11900 Fundamentals Command Reference

62
undo super authentication-mode
Default
Local password authentication applies.
Views
System view
Predefined user roles
network-admin
Parameters
local: Enables local password authentication.
scheme: Enables remote AAA authentication.
Usage guidelines
The authentication setting applies only to AUX and VTY users. A console user can switch the user role
without authentication.
For local password authentication, use the super password command to set a password.
For remote AAA authentication, set the username and password on the RADIUS or HWTACACS server.
If you specify both local and scheme keywords, the keyword first entered in the command takes
precedence, as follows:
• scheme local—Enables remote-then-local authentication mode. The device first performs AAA
authentication for user role switching. If the remote HWTACACS or RADIUS server does not
respond or the AAA configuration on the device is invalid, local password authentication is
performed.
• local scheme—Enables local-then-remote authentication mode. The device first performs local
password authentication. If no switching password is configured, the device performs remote
authentication.
For more information about AAA, see Security Configuration Guide.
Examples
# Enable local-only authentication for user role switching.
<Sysname> system-view
[Sysname] super authentication-mode local
# Enable remote-then-local authentication for user role switching.
<Sysname> system-view
[Sysname] super authentication-mode scheme local
Related commands
• authentication super ( Security Command Reference )
• super password
super password
Use super password to set a password for switching to a user role.
Use undo super password to restore the default.