Aaa authorization exec – Microsens MS453490M Management Guide User Manual

Page 599

Advertising
background image

C

HAPTER

24

| Authentication Commands

AAA

– 599 –

Using the command without specifying an interim interval enables

updates, but does not change the current interval setting.

E

XAMPLE

Console(config)#aaa accounting update periodic 30

Console(config)#

aaa authorization

exec

This command enables the authorization for Exec access. Use the no form

to disable the authorization service.

S

YNTAX

aaa authorization exec {default | method-name}

group {tacacs+ | server-group}

no aaa authorization exec {default | method-name}

default - Specifies the default authorization method for Exec

access.
method-name - Specifies an authorization method for Exec access.

(Range: 1-255 characters)
group - Specifies the server group to use.

tacacs+ - Specifies all TACACS+ hosts configured with the

tacacs-server

command.

server-group - Specifies the name of a server group configured

with the

aaa group server

command. (Range: 1-255 characters)

D

EFAULT

S

ETTING

Authorization is not enabled

No servers are specified

C

OMMAND

M

ODE

Global Configuration

C

OMMAND

U

SAGE

This command performs authorization to determine if a user is allowed

to run an Exec shell.

AAA authentication must be enabled before authorization is enabled.

If this command is issued without a specified named method, the

default method list is applied to all interfaces or lines (where this

authorization type applies), except those that have a named method

explicitly defined.

E

XAMPLE

Console(config)#aaa authorization exec default group tacacs+

Console(config)#

Advertising