Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - SYSTEM BASICS CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 448

JunosE 11.3.x System Basics Configuration Guide
aaa authorization config-commands
aaa new-model
authorization
418
Use the no version to delete the method list.
See aaa authorization.
Use to reestablish the default created when the aaa authorization commands
command was issued.
After the aaa authorization commands command has been issued, aaa authorization
config-commands is enabled by default, which means that all configuration commands
are authorized.
Example
host1(config)#aaa new-model
host1(config)#aaa authorization command 15 parks tacacs+ none
host1(config)#no aaa authorization config-commands
Use the no version to disable AAA configuration command authorization.
See aaa authorization config-commands.
Use to specify AAA new model as the authentication method for the vty lines on your
router.
If you specify AAA new model and you do not create an authentication list, users will
not be able to access the router through a vty line.
Example
host1(config)#aaa new-model
Use the no version to restore simple authentication.
See aaa new-model.
Use to apply AAA authorization to a specific vty line or group of lines.
Use the exec keyword to apply this authorization to CLI access in general.
Use the commands keyword to apply this authorization to user commands of the
privilege level you specify.
You can specify the name of an authorization method list; if no method list is specified,
the default is used.
After you enable the aaa authorization command and define a named authorization
method list (or use the default method list) for a particular type of authorization, you
must apply the defined list to the appropriate lines for authorization to take place.
Example
host1(config)#line vty 6
host1(line-config)#authorization commands 15 sonny
Copyright © 2010, Juniper Networks, Inc.