C613-50170-01 Rev B
Command Reference for x510 Series
1854
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
AAA C
OMMANDS
AAA
AUTHORIZATION
COMMANDS
•
The server decides if the user is authorized to execute the
command and returns the decision to the AlliedWare Plus device.
•
Depending on this decision the device will then either execute the
command or notify the user that authorization has failed.
If multiple servers are configured, and the first server is unreachable or
does not respond, the other servers will be queried, in turn, for an authorization
decision. If all servers are unreachable and a local fallback has been configured,
with the
none
parameter, then commands are authorized based on the user’s
privilege level; the same behavior as if command authorization had not been
configured. If, however, the local fallback is not configured and all servers become
unreachable then all commands except
logout
,
exit
, and
quit
will be denied.
The
default
method list is defined with a local fallback unless configured
differently using this command.
Example
To configure a commands authorization method list, named TAC15, using all
servers to authorize commands for privilege level 15, with a local
fallback, use the following commands:
awplus#
configure terminal
awplus(config)#
aaa authorization commands 15 TAC15 group
none
To configure the default method list to authorize commands for privilege level 7,
with no local fallback, use the following commands:
awplus#
configure terminal
awplus(config)#
aaa authorization commands 7 default group
To remove the authorization method list TAC15, use the following commands:
awplus#
configure terminal
awplus(config)#
no aaa authorization commands 15 TAC15
Related
Commands
aaa authorization config-commands
Command
changes
Version 5.4.6-2.1: command added
