R3303-HP HSR6800 Routers Fundamentals Command Reference

10
# Switch back to user privilege level 3. (Suppose that the switching password is 123. If no password is set,
users cannot switch to user privilege level 3.)
<Sysname> super 3
Please input the password to change the privilege level, press CTRL_C to abort.
Password:
User privilege level is 3, and only those commands can be used
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
Related commands
super password
super authentication-mode
super authentication-mode
Use super authentication-mode to set the user privilege level switching authentication mode.
Use undo super authentication-mode to restore the default.
Syntax
super authentication-mode { local | scheme } *
undo super authentication-mode
Default
The user privilege level switching authentication mode is local.
Views
System view
Default command level
2: System level
Parameters
local: Uses the local password set with the super password command for user privilege level switching
authentication. If no password is set with the command, the system allows a console user (who uses the
console port or an AUX port operating as the console port) to switch the privilege level without
authentication, but denies the switching requests of AUX and VTY users.
scheme: Uses AAA for user privilege level switching authentication. For more information about AAA,
see Security Configuration Guide.
local scheme: Uses the local password, if configured, for user privilege level switching authentication. If
the password is not configured, the system allows a console user to switch the privilege level but uses
AAA to authenticate other types of login users.
scheme local: Uses AAA for user privilege level switching authentication. If the AAA configuration is
incomplete or invalid or the server does not respond, the system uses the local password for the
authentication.
Examples
# Set the authentication mode for user privilege level switching to local.
<Sysname> system-view
[Sysname] super authentication-mode local