C
HAPTER
24
| Authentication Commands
AAA
– 599 –
â—† Using the command without specifying an interim interval enables
updates, but does not change the current interval setting.
EXAMPLE
Console(config)#aaa accounting update periodic 30
Console(config)#
aaa authorization
exec
This command enables the authorization for Exec access. Use the no form
to disable the authorization service.
SYNTAX
aaa authorization exec {default | method-name}
group {tacacs+ | server-group}
no aaa authorization exec {default | method-name}
default - Specifies the default authorization method for Exec
access.
method-name - Specifies an authorization method for Exec access.
(Range: 1-255 characters)
group - Specifies the server group to use.
tacacs+ - Specifies all TACACS+ hosts configured with the
tacacs-server command.
server-group - Specifies the name of a server group configured
with the aaa group server command. (Range: 1-255 characters)
DEFAULT SETTING
Authorization is not enabled
No servers are specified
COMMAND MODE
Global Configuration
COMMAND USAGE
â—† This command performs authorization to determine if a user is allowed
to run an Exec shell.
â—† AAA authentication must be enabled before authorization is enabled.
â—† If this command is issued without a specified named method, the
default method list is applied to all interfaces or lines (where this
authorization type applies), except those that have a named method
explicitly defined.
EXAMPLE
Console(config)#aaa authorization exec default group tacacs+
Console(config)#
To Next Page
Loading...
Need help?
General