Cisco WS-C6506 - Page 982

39-48
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authorization on the Switch
This example shows how to enable TACACS+ EXEC mode authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization exec enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ enable mode authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization enable enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ command authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization commands enable config tacacs+ deny both
Successfully enabled commands authorization.
Console> (enable)
This example shows how to verify the configuration:
Console> (enable) show authorization
Telnet:
-------
Primary Fallback
------- --------
exec: tacacs+ deny
enable: tacacs+ deny
commands:
config: tacacs+ deny
all: - -
Console:
--------
Primary Fallback
------- --------
exec: tacacs+ deny
enable: tacacs+ deny
commands:
config: tacacs+ deny
all: - -
Console> (enable)