Edge-Core ECS4110-28T Management Manual page 842

| Authentication Commands
C 24
HAPTER
AAA
aaa authorization
exec
E
XAMPLE
Console(config)#aaa accounting update periodic 30
Console(config)#
This command enables the authorization for Exec access. Use the no form
to disable the authorization service.
S
YNTAX
aaa authorization exec {default | method-name}
group {tacacs+ | server-group}
no aaa authorization exec {default | method-name}
default - Specifies the default authorization method for Exec
access.
method-name - Specifies an authorization method for Exec access.
(Range: 1-64 characters)
group - Specifies the server group to use.
tacacs+ - Specifies all TACACS+ hosts configured with the
tacacs-server host
server-group - Specifies the name of a server group configured
with the aaa group server
D S
EFAULT ETTING
Authorization is not enabled
No servers are specified
C M
OMMAND ODE
Global Configuration
C U
OMMAND SAGE
◆ This command performs authorization to determine if a user is allowed
to run an Exec shell.
AAA authentication must be enabled before authorization is enabled.
◆
If this command is issued without a specified named method, the
◆
default method list is applied to all interfaces or lines (where this
authorization type applies), except those that have a named method
explicitly defined.
E
XAMPLE
Console(config)#aaa authorization exec default group tacacs+
Console(config)#
– 842 –
command.
command. (Range: 1-64 characters)