Operation Manual – CLI
H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration
1-3
Caution:
z It is recommended not to change the level of a command arbitrarily, for it may cause
inconvenience to maintenance and operation.
z When you change the level of a command with multiple keywords, you should input
the keywords one by one in the order they appear in the command syntax.
Otherwise, your configuration will not take effect.
II. Configuration example
The network administrator (a level 3 user) wants to change some TFTP commands
(such as tftp get) from level 3 to level 0, so that general Telnet users (level 0 users) are
able to download files through TFTP.
# Change the tftp get command in user view (shell) from level 3 to level 0. (Originally,
only level 3 users can change the level of a command.)
<Sysname> system-view
[Sysname] command-privilege level 0 view shell tftp
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get
[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get
bootrom.btm
After the above configuration, general Telnet users can use the tftp get command to
download file bootrom.btm and other files from TFTP server 192.168.0.1 and other
TFTP servers.
1.2.3 Switching User Level
Table 1-2 User level switching configuration task list
Operation Remarks
Specifying the authentication mode for user level switching Optional
Adopting super password authentication for user level switching Required
Adopting HWTACACS authentication for user level switching Required
Switching to a specific user level Required
I. Specifying the authentication mode for user level switching
You can switch between user levels through corresponding commands after logging
into a switch successfully. The high-to-low user level switching is unlimited. However,
the low-to-high user level switching requires the corresponding authentication. The
To Next Page
Loading...
Need help?
General