Chapter 8
| Authentication Commands
AAA
– 211 –
start-stop
- Records authorization from starting point and stopping
point.
group
- Specifies the server group to use.
- Specifies all hosts configured with the
server-group -
Specifies the name of a server group configured
with the
command. (Range: 1-64 characters)
Default Setting
Authorization is not enabled
No servers are specified
Command Mode
Global Configuration
Command Usage
◆
The authorization of Exec mode commands is only supported by
servers.
◆
Note that the
default
and
method-name
fields are only used to describe
the authorization method(s) configured on the specified server,
and do not actually send any information to the server about the methods
to use.
Example
Console(config)#aaa authorization commands 15 default start-stop group
Console(config)#
aaa authorization exec
This command enables the authorization for Exec access. Use the
no
form to
disable the authorization service.
Syntax
aaa authorization
exec
{
default
|
method-name
}
group
{
|
server-group
}
no aaa authorization
exec
{
default
|
method-name
}
default
- Specifies the default authorization method for Exec
access.
method-name -
Specifies an authorization method for Exec access.
(Range: 1-64 characters)