HP ProCurve 7000dl Series Basic Management And Configuration Manual page 197

N o t e
Include the if-authenticated option for authorization to succeed if the
user authenticates. Include the none option to grant access automatically.
Include the group tacacs+ option if you want the ProCurve Secure Router
to use the TACACS+ server for authorization. Use group <groupname>
to specify a group of remote servers that will verify if a user is authorized
to enter the enable mode context. You can specify more than one group
of TACACS+ servers. If the servers in one group are unavailable, the
ProCurve Secure Router will contact another group. However, if the
ProCurve Secure Router contacts a TACACS+ server in the first group and
that server does not authorize the user to enter the enable mode context,
the ProCurve Secure Router will not attempt to authorize that user with
any other TACACS+ groups listed.
3. To enable authorization commands for the console line, enter the follow-
ing command from the global configuration mode context:
Syntax: aaa authorization console
4. Assign the named list to a console, Telnet, or SSH line.
• To assign a named list that grants access to the basic or enable mode
context, enter the following command from the appropriate line
configuration mode context:
Syntax: authorization commands [1 | 15] [default | <named list>]
Enter 1 to grant access to the basic mode, or enter 15 to grant access
to the enable mode.
Enter default to assign the default list, or replace <named list> with
the list that you have created.
• To assign a named list that allows authorized users to immediately
enter the enable mode context when they start a new CLI session,
enter the following command from the appropriate line configuration
mode context:
Syntax: authorization exec [default | <named list>]
Enter default if you configured a default named list or replace
<named list> with the name of the list that you created.
Take care when you configure authorization for the console line. If you are
not careful, you may prohibit yourself from entering commands from the
console.
Controlling Management Access to the ProCurve Secure Router
Quick Start
2-73