A User Cannot Enter the System View After Logging In to the Device Through Telnet When Local Authentication Is Used

Context

A user is only authorized to run commands at the same level as or below the user level. For example, a user at level 2 can run only the commands at levels 0, 1, and 2.

Fault Description

A user successfully logs in to the device through Telnet, but cannot run the system-view command to enter the system view or run other commands at the configuration level.

Common Causes

A common cause of the fault is that the user is not authorized to run commands at the configuration level (level 2).

If this is the case, the user level may be lower than level 2. There is a possibility that no user level is specified for the user, so the user level is set to the default level.

By default, the users on the console port are at level 15 and the users on the VTY user interface are at level 0.

Procedure

The following procedures can be used to rectify this fault:

If the administrator resets the user level for the user:
- The administrator can log in to the device from the VTY user interface through Telnet, and then run the local-user user-name privilege level level command to reset the user level.
- The administrator can log in to the device through the console port, and then run the local-user user-name privilege level level command to reset the user level.
```
<HUAWEI> system-view
[HUAWEI] aaa
[HUAWEI-aaa] local-user user1 privilege level 15  //Set the user level of user1 to 15.
```

If the user changes the user level online:

The administrator sets the password, which is used to change the user level to 15.
```
<HUAWEI> system-view
[HUAWEI] super password level 15 cipher Huawei@5678
```

The user logs in to the device through Telnet and uses the password to change the user level.

<HUAWEI> super 15
Password:  //Enter the password Huawei@5678.
Now user privilege is 15 level, and only those commands whose level is equal to o
r less than this level can be used.                                             
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE   //User level is raised successfully.