Aaa Authorization Exec - Edge-Core ECS3510-26P Management Manual

◆
E
XAMPLE
This command enables the authorization for Exec access. Use the no form
aaa authorization
to disable the authorization service.
exec
S
YNTAX
D
EFAULT
Authorization is not enabled
No servers are specified
C
OMMAND
Global Configuration
C
OMMAND
◆
◆
◆
E
XAMPLE
Using the command without specifying an interim interval enables
updates, but does not change the current interval setting.
Console(config)#aaa accounting update periodic 30
Console(config)#
aaa authorization exec {default | method-name}
group {tacacs+ | server-group}
no aaa authorization exec {default | method-name}
default - Specifies the default authorization method for Exec
access.
method-name - Specifies an authorization method for Exec access.
(Range: 1-255 characters)
group - Specifies the server group to use.
tacacs+ - Specifies all TACACS+ hosts configured with the
tacacs-server host
server-group - Specifies the name of a server group configured
with the aaa group server
S
ETTING
M
ODE
U
SAGE
This command performs authorization to determine if a user is allowed
to run an Exec shell.
AAA authentication must be enabled before authorization is enabled.
If this command is issued without a specified named method, the
default method list is applied to all interfaces or lines (where this
authorization type applies), except those that have a named method
explicitly defined.
Console(config)#aaa authorization exec default group tacacs+
Console(config)#
– 625 –
| Authentication Commands
C 23
HAPTER
command.
command. (Range: 1-255 characters)
AAA