H3C S3100 8C SI - Page 25

Operation Manual – CLI
H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration
1-5
password is set, the system prompts “%Password is not set” when you attempt to
switch to a higher user level. In this case, you cannot pass the super password
authentication.
Table 1-4 lists the operations to configure super password authentication for user level
switching, which can only be performed by level-3 users.
Table 1-4 Set a password for use level switching
Operation Command Remarks
Enter system view
system-view
—
Set the super password
for user level switching
super password [ level
level ] { cipher | simple }
password
Required
By default, the super
password is not set.
III. Adopting HWTACACS authentication for user level switching
To implement HWTACACS authentication for user level switching, a level-3 user must
perform the commands listed in
Table 1-5 to configure the HWTACACS authentication
scheme used for low-to-high user level switching. With HWTACACS authentication
enabled, you can pass the HWTACACS authentication successfully only after you
provide the right user name and the corresponding password as prompted. Note that if
you have passed the HWTACACS authentication when logging in to the switch, only
the password is required.
Table 1-5 lists the operations to configure HWTACACS authentication for user level
switching, which can only be performed by Level-3 users.
Table 1-5 Set the HWTACACS authentication scheme for user level switching
Operation Command Description
Enter system view
system-view
—
Enter ISP domain view
domain domain-name
—
Set the HWTACACS
authentication scheme
for user level switching
authentication super
hwtacacs-scheme
hwtacacs-scheme-name
Required
By default, the HWTACACS
authentication scheme for user
level switching is not set.