Brocade 6910 Ethernet Access Switch Configuration Guide (Supporting R2.2.0.0) - Manual (Page 211)

Brocade 6910 Ethernet Access Switch Configuration Guide 155
53-1002651-02
9
AAA
Default Setting
Authorization is not enabled
No servers are specified
Command Mode
Global Configuration
Command Usage
• This command performs authorization to determine if a user is allowed to run an Exec shell.
• AAA authentication must be enabled before authorization is enabled.
• If this command is issued without a specified named method, the default method list is
applied to all interfaces or lines (where this authorization type applies), except those that have
a named method explicitly defined.
Example
Console(config)#aaa authorization exec default group tacacs+
Console(config)#
aaa group server
Use this command to name a group of security server hosts. To remove a server group from the
configuration list, enter the no form of this command.
Syntax
[no] aaa group server {radius | tacacs+} group-name
radius - Defines a RADIUS server group.
tacacs+ - Defines a TACACS+ server group.
group-name - A text string that names a security server group. (Range: 1-64 characters)
Default Setting
None
Command Mode
Global Configuration
Example
Console(config)#aaa group server radius tps
Console(config-sg-radius)#
server
This command adds a security server to an AAA server group. Use the no form to remove the
associated server from the group.
Syntax
[no] server {index | ip-address}
index - Specifies the server index. (Range: RADIUS 1-5, TACACS+ 1)
ip-address - Specifies the host IP address of a server.