NetApp CN1610, Cli Command Reference

Page: 60 / 708

Chapter 3: Management Commands 57
no aaa
authentication
enable
Use this command to return to the default configuration.
aaa authorization
Use this command to configure an exec authorization method list. This list is
identified by
default
or a user-specified
list-name
. If
tacacs
is specified as the
authorization method, authorization commands are notified to a
server.
Exec Authorization
When exec authorization is configured for a line mode, the user may not be
required to use the enable command to enter Privileged EXEC mode. If the
authorization response indicates that the user has sufficient privilege levels for
Privileged EXEC mode, then the user bypasses User EXEC mode entirely.
The exec authorization usage scenario is this:
1. Configure Authorization Method List
aaa authorization exec listname method1 [ method2 ....]
2. Apply AML to an Access Line Mode (console, telnet, SSH)
authorization exec listname
3. When the user logs in, in addition to authentication, authorization will be
performed to determine if the user is allowed direct access to Privileged
EXEC mode.
Format
no aaa authentication enable {default | list-name }
Mode Global Config
Format
aaa authorization exec {default| list-name }
method1 [ method2 ]
Mode Global Config
Parameter Description
exec Provides exec authorization.
default The default list of methods for authorization
services.