9-3The super password is for level switching only and is different from the login password.Adopting HWTACACS authentication for user level switchingTo implement HWTACACS authentication for user level switching, a level-3 user must perform thecommands listed in the following table to configure the HWTACACS authentication scheme used forlow-to-high user level switching. With HWTACACS authentication enabled, you can pass theHWTACACS authentication successfully only after you provide the right user name and thecorresponding password as prompted. Note that if you have passed the HWTACACS authenticationwhen logging in to the switch, only the password is required.The following table lists the operations to configure HWTACACS authentication for user level switching,which can only be performed by Level-3 users.Follow these steps to set the HWTACACS authentication scheme for user level switching:To do… Use the command… RemarksEnter system view system-view —Enter ISP domain view domain domain-name —Set the HWTACACSauthentication scheme for userlevel switchingauthentication superhwtacacs-schemehwtacacs-scheme-nameRequiredBy default, the HWTACACSauthentication scheme for user levelswitching is not set.When setting the HWTACACS authentication scheme for user level switching using the authenticationsuper hwtacacs-scheme command, make sure the HWTACACS authentication scheme identified bythe hwtacacs-scheme-name argument already exists. Refer to AAA Operation for information aboutHWTACACS authentication scheme.Switching to a specific user levelFollow these steps to switch to a specific user level:To do… Use the command… RemarksSwitch to a specified user level super [ level ] RequiredExecute this command in user view.
