Aaa Authorization; Show Authorization Methods - Ubiquiti EDGESWITCH ES-24-250W Command Reference Manual

EdgeSwitch CLI Command Reference
no aaa authentication enable
Use this command to return to the default configuration .
no aaa authentication enable {default | list-name}
Format
Mode Global Config

aaa authorization

Use this command to configure command and exec authorization method lists . This list is identified by
or a user-specified list-name . If
are notified to a TACACS+ server . If
not applicable . A maximum of five authorization method lists can be created for the
Note: Local method is not supported for command authorization . Command authorization with RADIUS
will work if, and only if, the applied authentication method is also RADIUS .
aaa authorization {commands|exec} {default|list-name} method1[method2]
Format
Mode Global Config
Parameter
commands
exec
default
list-name
method
Example: The following shows an example of the command .
(UBNT EdgeSwitch) #
(UBNT EdgeSwitch) #configure
(UBNT EdgeSwitch) (Config)#aaa authorization exec default
(UBNT EdgeSwitch) (Config)#aaa authorization commands default tacacs+ none

show authorization methods

This command displays the configured authorization method lists .
show authorization methods
Format
Mode Privileged EXEC
Example: The following shows example CLI display output for the command .
(UBNT EdgeSwitch) #show authorization methods
Command Authorization List
-------------------------- --------------------------------------
dfltCmdAuthList
list2
list4
Line Command Method List
------------ ------------------------------
Telnet dfltCmdAuthList
SSH dfltCmdAuthList
Exec Authorization List
-----------------------
dfltExecAuthList
list2
list4
Ubiquiti Networks, Inc.
tacacs
is specified as the authorization method, authorization commands
none
is specified as the authorization method, command authorization is
Description
Provides authorization for all user-executed commands.
Provides exec authorization.
The default list of methods for authorization services.
Alphanumeric character string used to name the list of authorization methods.
TACACS+/RADIUS/Local and none are supported.
Method
tacacs
none
tacacs
Method
--------------------------------------
tacacs
none
tacacs
Management Commands
commands
tacacs+ none
none
undefined
undefined
none
undefined
undefined
default
type .
55