Dell Networking 2024 Reference Manual page 226

User Guidelines
A maximum of five authorization method lists may be created for command
types.
Command authorization attempts authorization for all EXEC mode
commands associated with a privilege level, including global configuration
commands. EXEC authorization attempts authorization when a user
attempts to enter Privileged EXEC mode.
If multiple authorization methods are listed, the switch will attempt
communication with each method in order, until successful communication
is established or all methods in the list have been tried. If authorization fails,
then the command is denied and no further attempts at authorization are
made for the user request.
The various utility commands like tftp, ping, outbound
command authorization. Applying a script is treated as a single command
apply script which also must pass authorization. Startup-config commands
applied on device boot-up are not subject to the authorization process.
Method
Local
TACACS
None
Radius
Example
Perform TACACS authorization on user commands. A TACACS server must
be configured.
console(config)#aaa authorization commands default tacacs
Perform exec authorization via RADIUS. A RADIUS server must be configured.
226
AAA Commands
Notes
The local method is not supported for command authorization.
This method is equivalent to selecting the none method when
used for EXEC authorization.
Selects TACACS for command or exec authorization.
Selecting the none method authorizes all commands. This
option is valid for both command and EXEC authorization.
The radius method is only valid for EXEC authorization.
Command authorization with RADIUS will work only if the
applied authentication method is radius.
telnet also must pass