66Syntaxsuper authentication-mode { local | scheme } *undo super authentication-modeDefaultLocal password authentication applies.ViewsSystem viewPredefined user rolesnetwork-adminParameterslocal: Enables local password authentication.scheme: Enables remote AAA authentication.Usage guidelinesFor local password authentication, use the super password command to set a password.For remote AAA authentication, set the username and password on the RADIUS or HWTACACSserver.If you specify both local and scheme keywords, the keyword first entered in the command takesprecedence.• scheme local—Enables remote-then-local authentication mode. The device first performs AAAauthentication to obtain a temporary user role. Local password authentication is performed ifthe remote HWTACACS or RADIUS server does not respond, or if the AAA configuration on thedevice is invalid.• local scheme—Enables local-then-remote authentication mode. The device first performslocal password authentication. If no password is configured for the user role, the deviceperforms remote authentication.For more information about AAA, see Security Configuration Guide.Examples# Enable local-only authentication for temporary user role authorization. system-view[Sysname] super authentication-mode local# Enable remote-then-local authentication for temporary user role authorization. system-view[Sysname] super authentication-mode scheme localRelated commands• authentication super (Security Command Reference)• super passwordsuper default roleUse super default role to specify the default target user role for temporary user role authorization.Use undo super default role to restore the default.Syntaxsuper default role rolename
