Ruijie RG-S2900G-E Series, Configuration Manual

Page: 465 / 943

Configuration Guide AAA Configuration
Keyword Description
local
Use the local username database for Exec
authorization.
none Do not perform Exec authorization.
group radius Use Radius for Exec authorization.
group Use for Exec authorization.
The table above lists the AAA Exec authorization methods supported by our product.
Caution
The exec authorization is always used together with the login authentication,
and they can be applied to the same line at the same time. But note that it is
possible to have different results of the authentication and the authorization
towards the same user because they can use different methods and servers. If
the exec authorization fails, even though the login authentication has passed,
the user can not access the CLI.
Using the local username database for exec authorization
To configure the Exec authorization with local database, it is required to configure the local
database first. You can configure the user privilege level while configuring the local user. By
default, the privilege level is 1. Run the following commands in the global configuration mode:
Command Function
configure terminal Enter the global configuration mode.
username name [ password password ]
Establish the local username and set the
password.
username name [ privilege level ] Set the user privilege level. (Optional)
end Return to the privileged mode.
show running-config Confirm the configuration.
To define the local Exec authorization method list, run the following commands:
Command Function
configure terminal Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa authorization
exec { default |
list-name } local
Define the local method list.
end Return to the privileged mode.
show aaa method-list
Confirm the configured method list.
configure terminal Enter the global configuration mode.
line vty line-num Enter the line configuration mode.