Authorization Settings; Figure 3-43 Aaa Authorization Settings - Samsung iES4028F Management Manual

3
Configuring the Switch
Console#show accounting statistics
Total entries: 3
Acconting type : dot1x
Username
Interface
Time elapsed since connected: 00:24:44
Acconting type : exec
Username
Interface
Time elapsed since connected: 00:25:09
Console#

Authorization Settings

AAA authorization is a feature that verifies a user has access to specific services.
Command Attributes
• Method Name – Specifies an authorization method for service requests.
The "default" method is used for a requested service if no other methods have been
defined. (Range: 1-255 characters)
• Service Request – Specifies the service as Exec (authorization for local console
or Telnet connections).
• Group Name - Specifies the authorization server group. (Range: 1-255
characters)
The group name "tacacs+" specifies all configured TACACS+ hosts (see
"Configuring Local/Remote Logon Authentication" on page 3-59). Any other group
name refers to a server group configured on the TACACS+ Group Settings page.
Authorization is only supported for TACACS+ servers.
Web – Click Security, AAA, Authorization, Settings. To configure a new authorization
method, specify a method name and a group name, select the service, then click
Add.
CLI – Specify the authorization method required and the server group.
Console(config)#aaa authorization exec default group tacacs+
Console(config)#
3-74
: testpc
: eth 1/1
: admin
: vty 0

Figure 3-43 AAA Authorization Settings

4-121