Cisco WS-C2948G-GE-TX Configuration Manual page 490

Configuring Authorization
This example shows how to enable TACACS+ command authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization commands enable config tacacs+ deny both
Successfully enabled commands authorization.
Console> (enable)
This example shows how to verify the configuration:
Console> (enable) show authorization
Telnet:
-------
exec:
enable:
commands:
config:
all:
Console:
--------
exec:
enable:
commands:
config:
all:
Console> (enable)
Disabling TACACS+ Authorization
To disable TACACS+ authorization on the switch, perform this task in privileged mode:
Task
Step 1 Disable authorization for normal mode. Enter the
console or telnet keywords if you want to disable
the authorization only for the console port or for
the Telnet connection attempts. Enter the both
keyword to enable authorization for both console
port and Telnet connection attempts.
Step 2
Disable authorization for enable mode. Enter the
console or telnet keywords if you want to disable
the authorization only for the console port or for
the Telnet connection attempts. Enter the both
keyword to enable authorization for both console
port and Telnet connection attempts.
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
30-44
Primary Fallback
------- --------
tacacs+ deny
tacacs+ deny
tacacs+ deny
- -
Primary Fallback
------- --------
tacacs+ deny
tacacs+ deny
tacacs+ deny
- -
Chapter 30 Configuring Switch Access Using AAA
Command
set authorization exec disable [console | telnet |
both]
set authorization enable disable [console |
telnet | both]
78-15908-01