Filter
Top Products
DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-21
Command Function
configure terminal
Enter the global configuration mode.
line vty line-num
Enter the line configuration mode.
authorization exec {default | list-name}
Apply the method list.
end
Return to the privileged mode.
show running-config
Confirm the configuration.
1.4.4.3 Example of Configuring Exec
Authorization
The example below illustrates how to configure exec authorization. The local login
authentication and the “Radius+local” exec authorization are used when the user on the
vty line 0-4 loggs in. The access server uses the Radius server with IP address
192.168.217.64 and shared keyword test. The local username and password are
DES-7200, and the privilege level is 6.
DES-7200# configure terminal
DES-7200(config)# aaa new-model
DES-7200(config)# radius-server host 192.168.217.64
DES-7200(config)# radius-server key test
DES-7200(config)# username DES-7200 password DES-7200
DES-7200(config)# username DES-7200 privilege 6
DES-7200(config)# aaa authentication login mlist1 local
DES-7200(config)# aaa authentication exec mlist2 group radius local
DES-7200(config)# line vty 0 4
DES-7200(config-line)# login authentication mlist1
DES-7200(config-line)# authorization exec mlist2
DES-7200(config-line)# end
DES-7200(config)# show running-config
!
aaa new-model
!
aaa authorization lexec mlist2 group radius local
aaa authentication login mlist1 local
!
username DES-7200 password DES-7200
username DES-7200 privilege 6
!
Radius-server host 192.168.217.64
radius-server key 7 093b100133
!
line con 0
line vty 0 4
authorization exec mliat2
login authentication mlist1
!
end