Filter
Top Products
DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-18
authorization only supports RADIUS; the Exec authorization supports RADIUS and
TACACS+. For details of the RADIUS, see Configuring RADIUS. For details of the
TACACS+, see Configuring TACACS+.
z (Optional) If the local authorization is required, it is required to use the username
command to define the user rights.
1.4.3 Configuring
Authorization List
To enable AAA authorization, execute the following command in the global configuration
mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa authorization exec
network{default | list-name} method1
[method2|…]
Define the AAA Exec authorization method.
aaa authorization network
network{default | list-name} method1
[method2|…]
Define the AAA Command authorization
method.
1.4.4 Configuring AAA
Exec Authorization
The Exec authorization grants the privilege level of command execution for the user
terminal loggs in the network access server (NAS). You can use the show privilege
command to display the specific level after the user loggs in the NAS CLI successfully (by
telnet, for example).
No matter which Exec authorization method you decide to use, you just need to execute
the aaa authorization exec command to define one or more authorization method list and
apply it to the specific line that need the Exec authorization.
To configure the AAA Exec authorization, run the following commands in the global
configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa authorization exec
network{default | list-name} method1
[method2|…]
Define the AAA Exec authorization method. If
you need to define multiple methods, execute
this command repeatedly.