30-44
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
Chapter 30 Configuring Switch Access Using AAA
Configuring Authorization
This example shows how to enable command authorization for both console and Telnet
connections. Authorization is configured with the option. The fallback option is deny.
Console> (enable) set authorization commands enable config deny both
Successfully enabled commands authorization.
Console> (enable)
This example shows how to verify the configuration:
Console> (enable) show authorization
Telnet:
-------
Primary Fallback
------- --------
exec:
deny
enable:
deny
commands:
config:
deny
all: - -
Console:
--------
Primary Fallback
------- --------
exec:
deny
enable:
deny
commands:
config:
deny
all: - -
Console> (enable)
Disabling Authorization
To disable authorization on the switch, perform this task in privileged mode:
Task
Command
Step 1
Disable authorization for normal mode. Enter the
console or telnet keywords if you want to disable
the authorization only for the console port or for
the Telnet connection attempts. Enter the both
keyword to enable authorization for both console
port and Telnet connection attempts.
set authorization exec disable [console | telnet |
both]
Step 2
Disable authorization for enable mode. Enter the
console or telnet keywords if you want to disable
the authorization only for the console port or for
the Telnet connection attempts. Enter the both
keyword to enable authorization for both console
port and Telnet connection attempts.
set authorization enable disable [console |
telnet | both]