Aaa authorization exec – PLANET SGSD-1022 User Manual

Page 447

Advertising
background image

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Syntax

accounting commands level {default | list-name} no accounting commands level

level -The privilege level for executing commands. (Range: 0-15)

default -Specifies the default method list created with the aaa accounting commands command (page 4-100).

list-name - Specifies a method list created with the aaa accounting commands command.

Default Setting

None

Command Mode

Line Configuration

Example

Console(config)#line console

Console(config-line)#accounting commands 15 default

Console(config-line)#

aaa authorization exec

This command enables the authorization for Exec access. Use the no form to disable the authorization service.

Syntax

aaa authorization exec {default | method-name} group {tacacs+ | server-group} no aaa authorization exec {default |

method-name} default - Specifies the default authorization method for Exec access.

method-name - Specifies an authorization method for Exec access. (Range: 1-255 characters)

group -Specifies the server group to use. -tacacs+ - Specifies all TACACS+ hosts configure with the tacacs-server host

command described on page 4-93.

-server-group -Specifies the name of a server group configured with the aaa group server command described on 4-97.

(Range: 1-255 characters)

Default Setting

Authorization is not enabled

No servers are specified

Command Mode

Global Configuration

Command Usage

This command performs authorization to determine if a user is allowed to run an Exec shell.

The user must be authenticated before AAA authorization is enabled.

If this command is issued without a specified named method, the default method list is applied to all interfaces or lines

(where this authorization type applies), except those that have a named method explicitly defined.

447

Advertising
This manual is related to the following products: