Exec Authorization Capabilities - Dell M6220 User Configuration Manual

Network: Network authorization enables a RADIUS server to assign a
•
particular 802.1X supplicant to a VLAN. For more information about
802.1X, see "Configuring Port and System Security" on page 481.
Table 9-3 shows the valid methods for each type of authorization:
Table 9-3. Authorization Methods
Method
local
none
radius
tacacs

Exec Authorization Capabilities

PowerConnect switches support two types of service configuration with exec
authorization: privilege level and administrative profiles.
Privilege Level
By setting the privilege level during exec authorization, a user can be placed
directly into Privileged EXEC mode when they log into the command line
interface.
Administrative Profiles
The Administrative Profiles feature allows the network administrator to
define a list of rules that control the CLI commands available to a user. These
rules are collected in a "profile." The rules in a profile can define the set of
commands, or a command mode, to which a user is permitted or denied
access.
Within a profile, rule numbers determine the order in which the rules are
applied. When a user enters a CLI command, rules within the first profile
assigned to the user are applied in descending order until there is a rule that
matches the input. If no rule permitting the command is found, then the
other profiles assigned to the user (if any) are searched for rules permitting
the command. Rules may use regular expressions for command matching. All
Configuring Authentication, Authorization, and Accounting
Commands
no
yes
no
yes
Exec
yes
yes
yes
yes
Network
no
no
yes
no
185