Related
Commands
login authentication, password, radius-server host, tacacs-server host
aaa authorization config-commands
Set parameters that restrict (or permit) a user’s access to EXEC level commands.
Syntax
aaa authorization config-commands
Disable authorization checking for CONFIGURATION level commands using the no
aaa authorization config-commands command.
Defaults Enabled when you configure aaa authorization commands command.
Command
Modes
CONFIGURATION
Command
History
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
By default, the aaa authorization commands command configures the system
to check both EXEC level and CONFIGURATION level commands. To enable only
EXEC-level command checking, use the command no aaa authorization
config-commands
.
aaa authorization exec
Set parameters that restrict (or permit) a user’s access to EXEC-level commands.
Syntax
aaa authorization exec {name | default} {local || tacacs+ ||
if-authenticated || none}
To disable authorization checking for EXEC level commands, use the no aaa
authorization exec command.
Parameters
name Define a name for the list of authorization methods.
default Define the default list of authorization methods.
local Use the authorization parameters on the system to perform
authorization.
tacacs+ Use the TACACS+ protocol to perform authorization.
none Enter the keyword none to apply no authorization.
Defaults none
Security
1159