HP MSR2000/3000/4000 Router Series Fundamentals Command Reference

41
Parameters
rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in
the system. If no user role is specified, you obtain the user role network-admin.
Usage guidelines
To enable a user to obtain a temporary user role that is not specified in the user account, you must
configure user role authentication. If no password is configured in the local password authentication, a
console or AUX user can obtain the user role by either entering a string or not entering anything.
Examples
# Obtain the user role network-operator.
<Sysname> super network-operator
Password:
User privilege role is network-operator, and only those commands can be used that authorized
to the role.
Related commands
• authentication super (Security Command Reference)
• super authentication-mode
• super password
super authentication-mode
Use super authentication-mode to set an authentication mode when you obtain the user role that you are
not logged in with.
Use undo super authentication-mode to restore the default.
Syntax
super authentication-mode { local | scheme } *
undo super authentication-mode
Default
Local password authentication applies.
Views
System view
Predefined user roles
network-admin
Parameters
local: Enables local password authentication.
scheme: Enables remote AAA authentication.
Usage guidelines
The authentication setting applies only to AUX, VTY, and TTY users. A console user can obtain the user
role without authentication.
For local password authentication, use the super password command to set a password.
For remote AAA authentication, set the username and password on the RADIUS or HWTACACS server.