Authorization - Planet Networking & Communication SGS-6340-24T4S Command Manual

1.2.10 authorization

Command:
authorization line {console | vty | web} exec method [method...]
no authorization line {console | vty | web} exec
Function:
Configure the list of the authorization method for the login user with VTY (login with Telnet and SSH), Web and
Console. The no command restores the default authorization method.
Parameters:
line selects the authorization line, including console, vty (telnet and ssh) and web; method is the list of the
authorization method, it must be among local, tacacs and radius keywords; local uses the local database to
authorize; tacacs uses the remote TACACS+ server to authorize; radius uses the remote RADIUS server to
authorize.
Default:
There is no authorization mode.
Command Mode:
Global Mode.
Usage Guide:
The authorization method for Console, VTY and Web login can be configured respectively. And authorization method
can be any one or combination of Local, RADIUS or TACACS. When login method is configuration in combination,
the preference goes from left to right. If the users have passed the authorization method, authorization method of
lower preferences will be ignored. To be mentioned, if the user receives corresponding protocol's answer whether
refuse or incept, it will not attempt the next authorization method; it will attempt the next authorization method if it
receives nothing. And AAA function RADIUS server should be configured before the RADIUS configuration method
can be used. And TACACS server should be configured before the TACACS configuration method can be used.
The local users adopt username command permission while authorization command is not configured, the users
login the switch via RADIUS/TACACS method and works under common mode.
Example:
Configure the telnet authorization method to RADIUS.
Switch(config)#authorization line vty exec radius
1-78