Cisco WS-C6506 Software Manual page 982

Configuring Authorization on the Switch
This example shows how to enable TACACS+ EXEC mode authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization exec enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ enable mode authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization enable enable tacacs+ deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable TACACS+ command authorization for both console and Telnet
connections. Authorization is configured with the tacacs+ option. The fallback option is deny.
Console> (enable) set authorization commands enable config tacacs+ deny both
Successfully enabled commands authorization.
Console> (enable)
This example shows how to verify the configuration:
Console> (enable) show authorization
Telnet:
-------
exec:
enable:
commands:
config:
all:
Console:
--------
exec:
enable:
commands:
config:
all:
Console> (enable)
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
39-48
Primary Fallback
------- --------
tacacs+ deny
tacacs+ deny
tacacs+ deny
- -
Primary Fallback
------- --------
tacacs+ deny
tacacs+ deny
tacacs+ deny
- -
Chapter 39 Configuring the Switch Access Using AAA
OL-8978-04