aaa authorization config-commands default
To configure default AAA authorization methods for all configuration commands, use the aaa authorization
config-commands default command. To revert to the default, use the no form of this command.
aaa authorization config-commands default [group group-list [local]| local]
no aaa authorization config-commands default [group group-list [local]| local]
Syntax Description
(Optional) Specifies to use a server group for
authorization.
group
Space-separated list of server groups. The list can
include the following:
•
tacacs+ for all configured TACACS+ servers.
•
Any configured TACACS+ server group name.
group-list
(Optional) Specifies to use the local role-based
database for authentication.
local
Command Default
Local
Command Modes
Global configuration
Command History
ModificationRelease
The none keyword was deprecated.5.0(2)
This command was introduced.4.2(1)
Usage Guidelines
To use this command, you must enable the TACACS+ feature using the feature tacacs+ command.
The group tacacs+ and group group-list methods refer to a set of previously defined TACACS+ servers.
Use the tacacs-server host command to configure the host servers. Use the aaa group server command to
create a named group of servers. Use the show aaa groups command to display the server groups on the
device.
If you specify more than one server group, the Cisco NX-OS software checks each group in the order that
you specify in the list. The local method is used only if all the configured server groups fail to respond and
you have configured local as the fallback method.
Cisco Nexus 7000 Series Security Command Reference
39
A Commands
aaa authorization config-commands default
To Next Page
Loading...
