HP MSR2000/3000/4000 Router Series Fundamentals Command Reference

42
If you specify both local and scheme keywords, the keyword first entered in the command takes
precedence, as follows:
• scheme local—Enables remote-then-local authentication mode. The device first performs AAA
authentication for temporary user role authorization. If the remote HWTACACS or RADIUS server
does not respond or the AAA configuration on the device is invalid, local password authentication
is performed.
• local scheme—Enables local-then-remote authentication mode. The device first performs local
password authentication. If no password is configured for the user role, the device performs remote
authentication.
For more information about AAA, see Security Configuration Guide.
Examples
# Enable local-only authentication for the temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode local
# Enable remote-then-local authentication for the temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode scheme local
Related commands
• authentication super (Security Command Reference)
• super password
super password
Use super password to set a password for a user role.
Use undo super password to restore the default.
Syntax
In non-FIPS mode:
super password [ role rolename ] [ { hash | simple } password ]
undo super password [ role rolename ]
In FIPS mode:
super password [ role rolename ]
undo super password [ role rolename ]
Default
No password is set for a user role.
Views
System view
Predefined user roles
network-admin