1-6To do… Use the command… RemarksEnter system view system-view —Enter ISP domain view domain domain-name —Set the HWTACACSauthentication scheme foruser level switchingauthentication superhwtacacs-schemehwtacacs-scheme-nameRequiredBy default, the HWTACACSauthentication scheme for user levelswitching is not set.When setting the HWTACACS authentication scheme for user level switching using the authenticationsuper hwtacacs-scheme command, make sure the HWTACACS authentication scheme identified bythe hwtacacs-scheme-name argument already exists. Refer to AAA Operation for information aboutHWTACACS authentication scheme.Switching to a specific user levelFollow these steps to switch to a specific user level:To do… Use the command… RemarksSwitch to a specified userlevel super [ level ] RequiredExecute this command in user view.z If no user level is specified in the super password command or the super command, level 3 isused by default.z For security purpose, the password entered is not displayed when you switch to another user level.You will remain at the original user level if you have tried three times but failed to enter the correctauthentication information.Configuration examplesAfter a general user telnets to the switch, his/her user level is 0. Now, the network administrator wants toallow general users to switch to level 3, so that they are able to configure the switch.1) Super password authentication configuration examplez The administrator configures the user level switching authentication policies.# Set the user level switching authentication mode for VTY 0 users to super password authentication. system-view[Sysname] user-interface vty 0[Sysname-ui-vty0] super authentication-mode super-password[Sysname-ui-vty0] quit
