Operation Manual – CLIH3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration1-3Caution:z It is recommended not to change the level of a command arbitrarily, for it may causeinconvenience to maintenance and operation.z When you change the level of a command with multiple keywords, you should inputthe keywords one by one in the order they appear in the command syntax.Otherwise, your configuration will not take effect.II. Configuration exampleThe network administrator (a level 3 user) wants to change some TFTP commands(such as tftp get) from level 3 to level 0, so that general Telnet users (level 0 users) areable to download files through TFTP.# Change the tftp get command in user view (shell) from level 3 to level 0. (Originally,only level 3 users can change the level of a command.) system-view[Sysname] command-privilege level 0 view shell tftp[Sysname] command-privilege level 0 view shell tftp 192.168.0.1[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 getbootrom.btmAfter the above configuration, general Telnet users can use the tftp get command todownload file bootrom.btm and other files from TFTP server 192.168.0.1 and otherTFTP servers.1.2.3 Switching User LevelTable 1-2 User level switching configuration task listOperation RemarksSpecifying the authentication mode for user level switching OptionalAdopting super password authentication for user level switching RequiredAdopting HWTACACS authentication for user level switching RequiredSwitching to a specific user level RequiredI. Specifying the authentication mode for user level switchingYou can switch between user levels through corresponding commands after logginginto a switch successfully. The high-to-low user level switching is unlimited. However,the low-to-high user level switching requires the corresponding authentication. The
