Cisco Nexus 7000 Series Command Reference

aaa authorization ssh-certificate
To configure the default AAA authorization method for TACACS+ or Lightweight Directory Access Protocol
(LDAP) servers, use the aaa authorization ssh-certificate command. To disable this configuration, use the
no form of this command.
aaa authorization ssh-certificate default {group group-list| local}
no aaa authorization ssh-certificate default {group group-list| local}
Syntax Description
Specifies to use a server group for authorization.group
Space-separated list of server groups. The list can
include the following:
•
tacacs+ for all configured TACACS+ servers.
•
ldap for all configured LDAP servers.
•
Any configured TACACS+ or LDAP server
group name.
group-list
Specifies to use the local database for authentication.local
Command Default
local
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.5.0(2)
Usage Guidelines
To use this command, you must enable the TACACS+ feature using the feature tacacs+ command or the
LDAP feature using the feature ldap command.
The group tacacs+, group ldap, and group group-list methods refer to a set of previously defined TACACS+
and LDAP servers. Use the tacacs-server host command or ldap-server host command to configure the host
servers. Use the aaa group server command to create a named group of servers. Use the show aaa groups
command to display the server groups on the device.
If you specify more than one server group, the Cisco NX-OS software checks each group in the order that
you specify in the list. The local method is used only if all the configured server groups fail to respond and
you have configured local as the fallback method.
Cisco Nexus 7000 Series Security Command Reference
43
A Commands
aaa authorization ssh-certificate

Cisco Nexus 7000 Series Specifications

General

Chassis	Modular
Operating System	Cisco NX-OS
Latency	Sub-microsecond
IPv6 Support	Yes
Redundancy	Power supplies, fans, supervisors, fabric modules
Power Supply	AC or DC
Layer Support	L2, L3
Network Management	CLI, SNMP
Virtualization	VRF, vPC
Ports	10 Gigabit Ethernet, 40 Gigabit Ethernet, 100 Gigabit Ethernet, Fibre Channel, Fibre Channel over Ethernet (FCoE)
Supported Modules	Various (1G, 10G, 40G, 100G)
Features	FCoE, OTV, LISP
MPLS Support	Yes
Quality of Service (QoS)	Yes
Security Features	ACLs, Cisco TrustSec, Control Plane Policing (CoPP)
Dimensions	Varies by model
Weight	Varies by model
Operating Temperature	0 to 40°C (32 to 104°F)
Storage Temperature	-40°F to 158°F (-40°C to 70°C)
Humidity	5 to 95% noncondensing
MTBF	Varies by model
Number of Slots	Varies by model (9-slot, 10-slot, 18-slot)