Table of Contents

Chapter 1 CLI Configuration Commands. 1-1

1.1 CLI Configuration Commands. 1-1

1.1.1 command-privilege level 1-1

1.1.2 display history-command. 1-2

1.1.3 super 1-2

1.1.4 super password. 1-3

 

Chapter 1  CLI Configuration Commands

1.1  CLI Configuration Commands

1.1.1  command-privilege level

Syntax

command-privilege level level view view command

undo command-privilege view view command

View

System view

Parameter

level: Command level, in the range of 0 to 3.

view: Command view. It can be any command view that the S3600 series Ethernet switches support.

command: Command to be set.

Description

Use the command-privilege level command to set the level of the specified command in specified view.

Use the undo command-privilege view command to restore the default level of the specified command in specified view.

All commands fall into four levels: visit, monitor, system, and manage, which are identified as 0, 1, 2, and 3, respectively. The administrator can change the level of a command as required so that the command can operate in corresponding view.

By default, the ping, tracert, and telnet commands are at the visit level (level 0), the display and debugging commands are at the monitor level (level 1), all configuration commands are at the system level (level 2), and FTP, XModem, TFTP and file system related commands are at the manage level (level 3).

Example

# Set the level of the interface command in system view to 0.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] command-privilege level 0 view system interface

1.1.2  display history-command

Syntax

display history-command

View

Any view

Parameter

None

Description

Use the display history-command command to display history commands. All history commands are saved in the history command buffer. When the history command buffer is full, the earliest commands will be overwritten.

Related command: history-command max-size.

Example

# Display history commands.

<H3C> display history-command

  system-view

  quit

  display history-command

1.1.3  super

Syntax

super [ level ]

View

User view

Parameter

level: User level, in the range of 0 to 3 with a default of 3. If you execute this command with the level argument not provided, you switch from the current user level to level 3.

Description

Use the super command to switch from the current user level to the one specified by the level argument. If you have set a password by using the super password [ level level ] { simple | cipher } password command, you need to provide the password when switching the user level. Otherwise, you will remain at the original user level.

Note that:

l           Users logging in to a switch also fall into four levels, which respectively correspond to the command levels. Users at a specific level can only use the commands at the same or lower levels.

l           AUX users can determine whether to use the super password [ level level ] { simple | cipher } password command to set a password for the switching from a lower user level to a higher user level. If a password is set, AUX users must enter the password correctly when switching from the current level to a higher level. Otherwise, they will remain at the original user level. If no password is set, they will directly switch from the current user level to a higher user level.

l           VTY users must use the super password [ level level ] { simple | cipher } password command to set a password for the switching from a lower user level to a higher user level. If no password is set, “Password is not set” will be displayed when they switch the user level, indicating that the switching fails and they remain at the original user level.

l           AUX users or VTY users can switch from a higher user level to a lower user level, no matter whether a switching password is set.

Related command: super password.

Example

# Switch to user level 3.

<H3C> super 3

Password:

1.1.4  super password

Syntax

super password [ level level ] { simple | cipher } password

undo super password [ level level ]

View

System view

Parameter

level: User level, in the range of 1 to 3 with a default of 3. If you execute this command with the level argument not provided, you will set a password for yourself as a user of level 3.

simple: Specifies to provide the password in plain text.

cipher: Specifies to provide the password in cipher text.

password: Password string to be set. If you specify the simple keyword, you must provide the password in plain text. If you specify the cipher keyword, you can provide the password in either cipher text or plain text. In plain text mode, the password contains up to 16 characters (for example 123) and the system automatically converts it into a 24-character ciphered password (for example, !TP<\*EMUHL,408`W7TH!Q!!). In cipher text mode, you can directly provide a 24-character ciphered password (for example, !TP<\*EMUHL,408`W7TH!Q!!), but you must know the corresponding plain password (for example, 123).

Description

Use the super password command to set a password for a higher level user who is switched from a lower user level. To prevent unauthorized accesses, the system requires you to enter the password for the higher level user. For the purpose of security, you cannot see the password you enter. You will remain at the original user level if you fail to enter the correct password after you have tried more than three times.

Use the undo super password command to remove the configuration.

Note that no matter whether you configure the password in plain text or cipher text, you must enter the password in plain text for authentication.

Example

# Set the password to “zbr” for the switching from the current user level to user level 3.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] super password level 3 simple zbr