313
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Administering the Wireless Device
Controlling Access Point Access with
Configuring Authorization for Privileged EXEC Access and Network
Services
AAA authorization limits the services available to a user. When AAA authorization is enabled, the
wireless device uses information retrieved from the user profile, which is located either in the local user
database or on the security server, to configure the user session. The user is granted access to a requested
service only if the information in the user profile allows it.
You can use the
aaa authorization
command in global configuration mode with the
keyword
to set parameters that restrict a user network access to privileged EXEC mode.
The
aaa authorization exec local
command sets these authorization parameters:
•
Use for privileged EXEC access authorization if authentication was performed by using
.
•
Use the local database if authentication was not performed by using .
Note
Authorization is bypassed for authenticated users who log in through the CLI even if authorization has
been configured.
To specify authorization for privileged EXEC access and network services, follow these
steps, beginning in privileged EXEC mode.
SUMMARY STEPS
1.
configure terminal
2.
aaa authorization network
3.
aaa authorization exec
4.
end
5.
show running-config
6.
copy running-config startup-config
DETAILED STEPS
Command
Purpose
Step 1
configure terminal
Enters global configuration mode.
Step 2
aaa authorization network
Configures the wireless device for user authorization for all
network-related service requests.
Step 3
aaa authorization exec
Configures the wireless device for user authorization to
determine whether the user has privileged EXEC access.
The
exec
keyword might return user profile information (such as
autocommand
information).
Step 4
end
Returns to privileged EXEC mode.
Step 5
show running-config
Verifies your entries.
Step 6
copy running-config startup-config
(Optional) Saves your entries in the configuration file.
