Chapter 8
| Authentication Commands
AAA
– 219 –
server-group - Specifies the name of a server group configured with the
aaa group server command. (Range: 1-64 characters)
Default Setting
Authorization is not enabled
No servers are specified
Command Mode
Global Configuration
Command Usage
◆
The authorization of Exec mode commands is only supported by TACACS+
servers.
◆
Note that the
default
and method-name fields are only used to describe the
authorization method(s) configured on the specified TACACS+ server, and do
not actually send any information to the server about the methods to use.
Example
Console(config)#aaa authorization commands 15 default start-stop group
tacacs+
Console(config)#
aaa authorization exec
This command enables the authorization for Exec access. Use the
no
form to
disable the authorization service.
Syntax
aaa authorization
exec
{
default
| method-name}
group
{
tacacs+
| server-group}
no aaa authorization
exec
{
default
| method-name}
default
- Specifies the default authorization method for Exec access.
method-name - Specifies an authorization method for Exec access.
(Range: 1-64 characters)
group
- Specifies the server group to use.
tacacs+
- Specifies all TACACS+ hosts configured with the tacacs-server
host command.
server-group - Specifies the name of a server group configured with the
aaa group server command. (Range: 1-64 characters)
Default Setting
Authorization is not enabled
No servers are specified
To Next Page
Loading...
