Edge-Core ES3510MA, Management Manual

Page: 599 / 984

C
HAPTER
24
| Authentication Commands
AAA
– 599 –
◆
Using the command without specifying an interim interval enables
updates, but does not change the current interval setting.
E
XAMPLE
Console(config)#aaa accounting update periodic 30
Console(config)#
aaa authorization
exec
This command enables the authorization for Exec access. Use the no form
to disable the authorization service.
S
YNTAX
aaa authorization exec { default | method-name }
group { | server-group }
no aaa authorization exec { default | method-name }
default - Specifies the default authorization method for Exec
access.
method-name - Specifies an authorization method for Exec access.
(Range: 1-255 characters)
group - Specifies the server group to use.
- Specifies all hosts configured with the
tacacs-server command.
server-group - Specifies the name of a server group configured
with the aaa group server command. (Range: 1-255 characters)
D
EFAULT
S
ETTING
Authorization is not enabled
No servers are specified
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
◆
This command performs authorization to determine if a user is allowed
to run an Exec shell.
◆
AAA authentication must be enabled before authorization is enabled.
◆
If this command is issued without a specified named method, the
default method list is applied to all interfaces or lines (where this
authorization type applies), except those that have a named method
explicitly defined.
E
XAMPLE
Console(config)#aaa authorization exec default group
Console(config)#