LevelOne GTL-2691 - Manual (Page 879)

C HAPTER 28 | Authentication Commands
AAA
– 879 –
◆ Using the command without specifying an interim interval enables
updates, but does not change the current interval setting.
E XAMPLE
Console(config)#aaa accounting update periodic 30
Console(config)#
aaa authorization
exec
This command enables the authorization for Exec access. Use the no form
to disable the authorization service.
S YNTAX
aaa authorization exec {default | method-name}
group {tacacs+ | server-group}
no aaa authorization exec {default | method-name}
default - Specifies the default authorization method for Exec
access.
method-name - Specifies an authorization method for Exec access.
(Range: 1-64 characters)
group - Specifies the server group to use.
tacacs+ - Specifies all TACACS+ hosts configured with the
tacacs-server host command.
server-group - Specifies the name of a server group configured
with the aaa group server command. (Range: 1-64 characters)
D EFAULT S ETTING
Authorization is not enabled
No servers are specified
C OMMAND M ODE
Global Configuration
C OMMAND U SAGE
◆ This command performs authorization to determine if a user is allowed
to run an Exec shell.
◆ AAA authentication must be enabled before authorization is enabled.
◆ If this command is issued without a specified named method, the
default method list is applied to all interfaces or lines (where this
authorization type applies), except those that have a named method
explicitly defined.
E XAMPLE
Console(config)#aaa authorization exec default group tacacs+
Console(config)#