Kentrox AI232 Manual De Usuario

AI232 Version 9.6x User’s Guide

AI232 Commands: aaa profile

aaa profile

This command associates a custom profile with a privilege level or range of privilege 
levels. The following rules apply:

z

TACACS+ privilege levels range from 0 to 15.

z

Custom profiles can be associated with privilege levels 2 through 14.

z

Privilege levels 2 through 14 default to the management system profile.

z

Privilege levels 0, 1, and 15 are reserved for the Status, Management, and 
Supervisor system profiles (respectively).

For information on creating custom profiles, refer to command 

.

Privilege levels are used only if the authorization method is set to 

priv-lvl

. The only 

exception to this occurs under all of the following conditions:

1. The authentication server returns a privilege level.

2. The authorization server cannot be reached.

3. The authorization is set to per-command and fallback is enabled.

For information on configuring the authorization method, refer to command 

.

shell

aaa profile { 

priv_range

 } { 

profile_name

 | default }

No associations configured

priv_range

Defines the range of privilege levels that will be associated with 
the profile. Individual values are separated by commas (,) and 
hyphens (-). For example, 

1,4-6

 specifies privilege levels 1, 4, 5, 

and 6.

profile_name

Specifies the name of an existing profile.

default

Removes the association between a range of privilege levels and 
a profile.