DELL N3000 User Manual

Configuring Authentication, Authorization, and Accounting

Authorization is used to determine which services the user is allowed to 

access. For example, the authorization process may assign a user’s privilege 

level, which determines the set of commands the user can execute. There are 

three kinds of authorization: commands, exec, and network.

• Commands: Command authorization determines which CLI commands 

the user is authorized to execute.

• Exec: Exec authorization determines what the user is authorized to do on 

the switch; that is, the user’s privilege level and an administrative profile.

•

Network: Network authorization enables a RADIUS server to assign a 

particular 802.1X supplicant to a VLAN. For more information about 

802.1X, see "Configuring Port and System Security" on page 503.

Table 10-3 shows the valid methods for each type of authorization:

Dell Networking switches support two types of service configuration with 

exec authorization: privilege level and administrative profiles.

By setting the privilege level during exec authorization, a user can be placed 

directly into Privileged EXEC mode when they log into the command line 

interface.

local

no

yes

no

none

yes

yes

no

radius

no

yes

yes

tacacs

yes

yes

no