Cisco Catalyst 2960-X - Page 115

PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Configures the switch for user RADIUS authorization for
all network-related service requests.
aaa authorization network radius
Example:
Switch(config)# aaa authorization network
Step 3
radius
Configures the switch for user RADIUS authorization if the
user has privileged EXEC access.
aaa authorization exec radius
Example:
Switch(config)# aaa authorization exec radius
Step 4
The exec keyword might return user profile information
(such as autocommand information).
Returns to privileged EXEC mode.end
Example:
Switch(config)# end
Step 5
Verifies your entries.show running-config
Example:
Switch# show running-config
Step 6
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 7
What to Do Next
You can use the aaa authorization global configuration command with the radius keyword to set parameters
that restrict a user’s network access to privileged EXEC mode.
The aaa authorization exec radius local command sets these authorization parameters:
•
Use RADIUS for privileged EXEC access authorization if authentication was performed by using
RADIUS.
•
Use the local database if authentication was not performed by using RADIUS.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 91
Configuring RADIUS
Configuring RADIUS Authorization for User Privileged Access and Network Services