Kentrox AI232 - Manual (Page 184)

AI232 Version 9.6x User’s Guide
AI232 Commands: aaa profile
8-12
aaa profile
Description
This command associates a custom profile with a privilege level or range of privilege
levels. The following rules apply:
z TACACS+ privilege levels range from 0 to 15.
z Custom profiles can be associated with privilege levels 2 through 14.
z Privilege levels 2 through 14 default to the management system profile.
z Privilege levels 0, 1, and 15 are reserved for the Status, Management, and
Supervisor system profiles (respectively).
For information on creating custom profiles, refer to command profile on page 8-78 .
Privilege levels are used only if the authorization method is set to priv-lvl . The only
exception to this occurs under all of the following conditions:
1. The authentication server returns a privilege level.
2. The authorization server cannot be reached.
3. The authorization is set to per-command and fallback is enabled.
For information on configuring the authorization method, refer to command aaa
author on page 8-8 .
Command Type
shell
Formats
aaa profile { priv_range } { profile_name | default }
Parameters
Command Defaults
No associations configured
priv_range Defines the range of privilege levels that will be associated with
the profile. Individual values are separated by commas (,) and
hyphens (-). For example,
1,4-6 specifies privilege levels 1, 4, 5,
and 6.
profile_name Specifies the name of an existing profile.
default Removes the association between a range of privilege levels and
a profile.