Configuring User Role Switching Authentication; Switching The User Role - HP 12500 Configuration Manual

Table 7 Authentication modes for user role switching
Keywords
local
scheme
local scheme
scheme local

Configuring user role switching authentication

Step
1. Enter system view.
2. Set an authentication
mode.
3. Set a local
authentication
password for
switching to a user
role.

Switching the user role

An AUX or VTY user must pass authentication before switching to a user role.
Perform the following task in user view:
Authentication mode
Local password
authentication only
(local-only)
Remote AAA authentication
through HWTACACS or
RADIUS (remote-only)
Local password
authentication first and then
remote AAA authentication
(local-then-remote)
Remote AAA authentication
first and then local password
authentication
(remote-then-local)
Command
system-view
super
authentication-mode
{ local | scheme } *
super password [ role
rolename ] { hash |
simple } password
Description
The device uses the locally configured switching password for
authentication.
The device sends the username and password to the
HWTACACS or RADIUS server for remote authentication.
To use this mode, you must perform the following
configuration tasks:
•
Configure the required HWTACACS or RADIUS scheme
and configure the ISP domain to use the scheme for the
user. For more information, see Security Configuration
Guide.
•
Add the user account and password on the HWTACACS
or RADIUS server.
Local password authentication is performed first. If no
switching password is configured, the device performs AAA
authentication.
AAA authentication is performed first. If the remote
HWTACACS or RADIUS server does not respond or the AAA
configuration on the device is invalid, local password
authentication is performed.
Remarks
N/A
By default, local-only authentication applies.
Use this step for local password authentication.
By default, no switching password is configured.
If you do not specify the role rolename option, the
command sets the password for network-admin or
mdc-admin. A default MDC user can use this
password to switch to the network-admin, and a
non-default MDC user can use this password to switch
to the mdc-admin user role.
24