H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 33)

18
When you switch the user privilege level, the information you need to provide varies with combinations
of the user interface authentication mode and the super authentication mode.
Table 6 Information input for user privilege level switch
User interface
authentication
mode
User privilege level
switch
authentication
mode
Information input for the
first authentication mode
Information input after the
authentication mode changes
none/password
local
Local user privilege level
switch password (configured
on the device)
—
local scheme
Local user privilege level
switch password
Username and password for
privilege level switch (configured
on the AAA server)
scheme
Username and password for
privilege level switch
—
scheme local
Username and password for
privilege level switch Local user privilege level switch
password
scheme
local
Local user privilege level
switch password
—
local scheme
Local user privilege level
switch password
Password for privilege level
switch (configured on the AAA
server). The system uses the
username used for logging in as
the privilege level switch
username.
scheme
Password for privilege level
switch (configured on the
AAA server). The system uses
the username used for
logging in as the privilege
level switch username.
—
scheme local
Password for privilege level
switch (configured on the
AAA server). The system uses
the username used for
logging in as the privilege
level switch username.
Local user privilege level switch
password
CAUTION:
•
When the authentication mode is set to local, configure the local password before switching to a higher
user privilege level.
• When the authentication mode is set to scheme, configure AAA related parameters before switching to
a higher user privilege level.
• The privilege level switch fails after three consecutive unsuccessful password attempts.
• For more information about user interface authentication, see the chapter “CLI login.”