1-13 system-view[Sysname] user-interface vty 0 15[Sysname-ui-vty1] authentication-mode password[Sysname-ui-vty0-15] set authentication password cipher 123[Sysname-ui-vty0-15] user privilege level 2By default, when users log in to the device through Telnet, they can use the commands of level 0 afterpassing the authentication. After you set the user privilege level under the user interface, when userslog in to the device through Telnet, they need to input password 123, and then they can use commandsof levels 0, 1, and 2.Switching user privilege levelIntroductionUsers can switch their user privilege level temporarily without logging out and disconnecting the currentconnection; after the switch, users can continue to configure the device without the need of relogin andreauthentication, but the commands that they can execute have changed. For example, if the currentuser privilege level is 3, the user can configure system parameters; after switching the user privilegelevel to 0, the user can only execute some simple commands, like ping and tracert, and only a fewdisplay commands. The switching of user privilege level is temporary, and effective for the current login;after the user relogs in, the user privilege restores to the original level.To avoid misoperations, the administrators are recommended to log in to the device by using a lowerprivilege level and view device operating parameters, and when they have to maintain the device, theycan switch to a higher level temporarily; when the administrators need to leave for a while or asksomeone else to manage the device temporarily, they can switch to a lower privilege level before theyleave to restrict the operation by others.Users can switch from a high user privilege level to a low user privilege level without entering apassword; when switching from a low user privilege level to a high user privilege level, only the AUXlogin users do not have to enter the password, and users that log in from VTY user interfaces need toenter the password for security’s sake. This password is for level switching only and is different from thelogin password. If the entered password is incorrect or no password is configured, the switching fails.Therefore, before switching a user to a higher user privilege level, you should configure the passwordneeded.Follow these steps to switch user privilege level:To do… Use the command… RemarksEnter system view system-view —Configure the password forswitching the user privilegelevelsuper password [ leveluser-level ] { simple | cipher }passwordRequiredBy default, no password isconfigured.Exit to user view quit —Switch the user privilege level super [ level ]RequiredWhen logging in to the device,a user has a user privilegelevel, which is decided by userinterface or authentication userlevel.
