Related
Commands
login authentication, password, radius-server host, tacacs-server host
aaa authorization config-commands
Set parameters that restrict (or permit) a user’s access to EXEC level commands.
Syntax
aaa authorization config-commands
Disable authorization checking for CONFIGURATION level commands using the
no
aaa authorization config-commands
command.
Defaults
Enabled when you configure
aaa authorization commands
command.
Command
Modes
CONFIGURATION
Command
History
Version 8.3.16.1
Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
By default, the
aaa authorization commands
command configures the system
to check both EXEC level and CONFIGURATION level commands. To enable only
EXEC-level command checking, use the command
no aaa authorization
config-commands
.
aaa authorization exec
Set parameters that restrict (or permit) a user’s access to EXEC-level commands.
Syntax
aaa authorization exec {
name
| default} {local || ||
if-authenticated || none}
To disable authorization checking for EXEC level commands, use the
no aaa
authorization exec
command.
Parameters
name
Define a name for the list of authorization methods.
default
Define the default list of authorization methods.
local
Use the authorization parameters on the system to perform
authorization.
Use the protocol to perform authorization.
none
Enter the keyword
none
to apply no authorization.
Defaults
none
Security
1159
