Cisco WS-C2950SX-48-SI Configuration Manual page 488

Configuring Authorization
Enabling TACACS+ Authorization
To enable TACACS+ authorization on the switch, perform this task in privileged mode:
Task
Step 1 Enable authorization for normal login mode.
Enter the console or telnet keywords if you want
to enable authorization only for console port or
Telnet connection attempts. Enter the both
keyword to enable authorization for both console
port and Telnet connection attempts.
Step 2
Enable authorization for enable mode. Enter the
console or telnet keywords if you want to enable
authorization only for console port or Telnet
connection attempts. Enter the both keyword to
enable authorization for both console port and
Telnet connection attempts.
Step 3 Enable authorization of configuration commands.
Enter the console or telnet keywords if you want
to enable authorization only for console port or
Telnet connection attempts. Enter the both
keyword to enable authorization for both console
port and Telnet connection attempts.
Step 4
Verify the TACACS+ authorization configuration. show authorization
This example shows how to enable TACACS+ EXEC mode authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization exec enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ enable mode authorization for console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization enable enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ command authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization commands enable config tacacs+ deny both
Successfully enabled commands authorization.
Console> (enable)
This example shows how to verify the configuration:
Console> (enable) show authorization
Telnet:
-------
exec:
enable:
commands:
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
30-44
Primary Fallback
------- --------
tacacs+ deny
tacacs+ deny
Chapter 30 Configuring Switch Access Using AAA
Command
set authorization exec enable {option}
{fallbackoption} [console | telnet | both]
set authorization enable enable {option}
{fallbackoption} [console | telnet | both]
set authorization commands enable {config |
all} [option} {fallbackoption} [console | telnet |
both]
—
Release 8.1
78-15486-01