Filter
Top Products
DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-19
Command Function
line vty line-num
Enter the line to which the AAA Exec
authorization method is applied.
authorization exec {default |
list-name}
Apply the method to the line.
The keyword "list-name" is used to name the created authorization method list, which can
be any string. The keyword "method" means the actual algorithm for authorization. Only
when the current method returns ERROR (no reply), the next authorization method will be
attempted. If the current method returns FAIL, no authorization method will be used any
more. To make the authorization return successfully, even if no specified methods reply, it
is possible to specific "none" as the last authorization method.
In the example below, it is possible to pass the Exec authorication even if the Radius
server returns TIMEOUT：
aaa authorization exec default group radius none
Keyword Description
local
Use the local username database for Exec
authorization.
none
Do not perform Exec authorization.
group radius
Use Radius for Exec authorization.
group tacacs+
Use Tacacs+ for Exec authorization.
The table above lists the AAA Exec authorization methods supported by our product.
Caution
The exec authorization is always used together with the login authentication,
and they can be applied to the same line at the same time. But note that it is
possible to have different results of the authentication and the authorization
towards the same user because they can use different methods and servers. If
the exec authorization fails, even though the login authentication has passed,
the user can not access the CLI.
1.4.4.1 Using the local username
database for exec authorization
To configure the Exec authorization with local database, it is required to configure the local
database first. You can configure the user privilege level while configuring the local user.
By default, the privilege level is 1. Run the following commands in the global configuration
mode:
Command Function
configure terminal
Enter the global configuration mode.