9-4z If no user level is specified in the super password command or the super command, level 3 isused by default.z For security purpose, the password entered is not displayed when you switch to another user level.You will remain at the original user level if you have tried three times but failed to enter the correctauthentication information.Configuration examplesAfter a general user telnets to the switch, his/her user level is 0. Now, the network administrator wants toallow general users to switch to level 3, so that they are able to configure the switch.Super password authentication configuration examplez The administrator configures the user level switching authentication policies.# Set the user level switching authentication mode for VTY 0 users to super password authentication. system-view[Sysname] user-interface vty 0[Sysname-ui-vty0] super authentication-mode super-password[Sysname-ui-vty0] quit# Set the password used by the current user to switch to level 3.[Sysname] super password level 3 simple 123z A VTY 0 user switches its level to level 3 after logging in.# A VTY 0 user telnets to the switch, and then uses the set password to switch to user level 3. super 3Password:User privilege level is 3, and only those commands can be usedwhose level is equal or less than this.Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE# After configuring the switch, the general user switches back to user level 0. super 0User privilege level is 0, and only those commands can be usedwhose level is equal or less than this.Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGEHWTACACS authentication configuration examplez The administrator configures the user level switching authentication policies.# Configure a HWTACACS authentication scheme named acs, and specify the user name andpassword used for user level switching on the HWTACACS server defined in the scheme. Refer to AAAOperation for detailed configuration procedures.# Enable HWTACACS authentication for VTY 0 user level switching. system-view[Sysname] user-interface vty 0[Sysname-ui-vty0] super authentication-mode scheme
