Cisco Nexus 5500 Series - Aaa Authorization Ssh-Publickey

15
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter A Commands
aaa authorization ssh-publickey
aaa authorization ssh-publickey
To configure local authorization with the Secure Shell (SSH) public key as the default AAA
authorization method for TACACS+ servers, use the aaa authorization ssh-publickey command. To
revert to the default, use the no form of this command.
aaa authorization ssh-publickey default {group group-list | local}
no aaa authorization ssh-publickey default {group group-list | local}
Syntax Description
Command Default local
Command Modes Global configuration mode
Command History
Usage Guidelines If you specify more than one server group, the Cisco NX-OS software checks each group in the order
that you specify in the list. The local method is used only if all the configured server groups fail to
respond and you have configured local as the fallback method.
If you specify the group method or local method and it fails, the authorization can fail. If you have not
configured a fallback method after the server group method, authorization fails if all server groups fail
to respond.
This command does not require a license.
Examples This example shows how to configure local authorization with the SSH public key as the default AAA
authorization method:
switch# configure terminal
switch(config)# aaa authorization ssh-publickey default local
switch(config)#
group Specifies to use a server group for authorization.
group-list Space-separated list of server groups. The server group name can be a maximum
of 127 characters.
local Specifies to use the local database for authentication.
Release Modification
5.2(1)N1(1) This command was introduced.