5-4
can switch to a higher level temporarily; when the administrators need to leave for a while or ask
someone else to manage the device temporarily, they can switch to a lower privilege level before they
leave to restrict the operation by others.
The high-to-low user level switching is unlimited. However, the low-to-high user level switching requires
the corresponding authentication. Generally, two authentication modes are available: the super
password authentication mode and HWTACACS authentication mode.
Complete the following tasks to configure user level switching:
Task Remarks
Specifying the authentication mode for user level
switching
Optional
Adopting super password authentication for user level
switching
Required
The administrator
configures the user level
switching authentication
policies
Adopting HWTACACS authentication for user level
switching
Required
The user switches user
level after logging in
Switching to a specific user level Required
Specifying the authentication mode for user level switching
The low-to-high user level switching requires the corresponding authentication. The super password
authentication mode and HWTACACS authentication mode are available at the same time to provide
authentication redundancy.
The configuration of authentication mode for user level switching is performed by Level-3 users
(administrators).
Follow these steps to specify the authentication mode for user level switching:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter user interface view
user-interface [ type ]
first-number [ last-number ]
—
Super password
authentication
super
authentication-mode
super-password
HWTACACS authentication
super
authentication-mode
scheme
Super password
authentication preferred (with
the HWTACACS
authentication as the backup
authentication mode)
super
authentication-mode
super-password scheme
Specify the
authentication
mode for user
level switching
HWTACACS authentication
preferred (with the super
password authentication as
the backup authentication
mode)
super
authentication-mode
scheme super-password
Optional
These
configurations
will take effect on
the current user
interface only.
By default, super
password
authentication is
adopted for user
level switching.
To Next Page
Loading...
