Enabling Tacacs+ Authorization - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Configuring Authorization

Enabling TACACS+ Authorization

To enable TACACS+ authorization on the switch, perform this task in privileged mode:
Task
Step 1 Enable authorization for normal login mode. Use
the console or telnet keywords if you want to
enable authorization only for console port or
Telnet connection attempts. Use the both
keyword to enable authorization for both console
port and Telnet connection attempts.
Step 2
Enable authorization for enable mode. Use the
console or telnet keywords if you want to enable
authorization only for console port or Telnet
connection attempts. Use the both keyword to
enable authorization for both console port and
Telnet connection attempts.
Step 3 Enable authorization of configuration commands.
Use the console or telnet keywords if you want to
enable authorization only for console port or
Telnet connection attempts. Use the both
keyword to enable authorization for both console
port and Telnet connection attempts.
Step 4
Verify the TACACS+ authorization configuration. show authorization
This example shows how to enable TACACS+ EXEC mode authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny:
Console> (enable) set authorization exec enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ enable mode authorization for console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny:
Console> (enable) set authorization enable enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ command authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny:
Console> (enable) set authorization commands enable config tacacs+ deny both
Successfully enabled commands authorization.
Console> (enable)
This example shows how to verify the configuration:
Console> (enable) show authorization
Telnet:
-------
exec:
enable:
commands:
config:
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
27-52
Primary Fallback
------- --------
tacacs+ deny
tacacs+ deny
tacacs+ deny
Chapter 27 Configuring Switch Access Using AAA
Command
set authorization exec enable {option}
{fallbackoption} [console | telnet | both]
set authorization enable enable {option}
{fallbackoption} [console | telnet | both]
set authorization commands enable {config |
all} [option} {fallbackoption} [console | telnet |
both]
78-12647-02