30-41
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
Chapter 30 Configuring Switch Access Using AAA
Understanding How Authorization Works
•
EXEC mode (normal login)—When the authorization feature is enabled for EXEC mode, the user
must supply a valid username and password pair to access the EXEC mode. Authorization is
required only if you have enabled the authorization feature.
•
Enable mode (privileged login)—When the authorization feature is enabled for enable mode, the
user must supply a valid username and password pair to access enable mode. Authorization is
required only if you have enabled the authorization feature for enable mode.
Primary and Fallback Options
You can specify the primary and fallback options that are used in the authorization process. The
following primary options and fallback options are available:
•
—If you have been authenticated and there is no response from the server,
authorization succeeds immediately.
•
if-authenticated—If you have been authenticated and there is no response from the
server, authorization succeeds immediately.
•
none—Authorization succeeds if the server does not respond.
•
deny—Authorization fails if the server fails to respond. The Deny option is a fallback
option only. This is the default behavior.
Command Authorization
You can require authorization for all commands or for configuration (enable mode) commands only.
Configuration commands include the following:
•
copy
•
clear
•
commit
•
configure
•
delete
•
download
•
format
•
reload
•
rollback
•
session
•
set
•
squeeze
•
switch
•
undelete