DELL 8132 ユーザーズマニュアル
AAA Commands
245
Example
The following example configures the default authentication login to attempt
RADIUS authentication, then local authentication, then enable
authentication, and then, if all the previous methods returned an error, allow
the user access (none method).
console(config)# aaa authentication login default
radius local enable none
aaa authorization
Use the aaa authorization command to create an authorization method list.
A list may be identified by a user-specified list-name or the keyword default.
Use the no form of the command to delete an authorization list.
Use the no form of the command to delete an authorization list.
Syntax
aaa authorization {commands|exec|network}{
default|list-name} method1
[method2]
no aaa authorization {commands|exec|network} {
no aaa authorization {commands|exec|network} {
default|list-name}
Parameter Description
Parameter
Description
Authorization specifier:
exec
exec
Provides EXEC authorization. All methods are supported.
commands
Performs authorization of user commands. Only none and
tacacs methods are supported.
network
Performs RADIUS authorization of commands. Only the
default list is supported.
default
The default list of methods for authorization services
(dfltCmdAuthList and dfltExecAuthList). Only the radius
method is supported.
list-name
Character string used to name the list of accounting methods.
The list name can consist of any alphanumeric character up to
15 characters in length. Use quotes around the list name if
embedded blanks are contained in the list name.
2CSPC4.X8100-SWUM102.book Page 245 Friday, March 15, 2013 8:56 AM