Cisco Catalyst 2960 Series, Configuration Manual

Page: 1014 / 2288

Configuring RADIUS Authorization for User Privileged Access and Network Services
Authorization is bypassed for authenticated users who log in through the CLI even if authorization has
been configured.
Note
Follow these steps to configure RADIUS authorization for user priviledged access and network services:
SUMMARY STEPS
1.
enable
2. configure terminal
3. aaa authorization network radius
4.
aaa authorization exec radius
5. end
6.
show running-config
7.
copy running-config startup-config
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. Enter your password if
prompted.
enable
Example:
Switch> enable
Step 1
Enters the global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 2
Configures the switch for user RADIUS authorization for
all network-related service requests.
aaa authorization network radius
Example:
Switch(config)# aaa authorization network
Step 3
radius
Configures the switch for user RADIUS authorization if the
user has privileged EXEC access. aaa authorization exec radius
Example:
Switch(config)# aaa authorization exec radius
Step 4
The exec keyword might return user profile information
(such as autocommand information).
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
932
How to Configure RADIUS