21-52
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
78-13315-02
Chapter 21 Configuring Switch Access Using AAA
Configuring Authorization
•
You must specify the mode, option, fallback option, and connection type when enabling
authorization.
•
Configure RADIUS and servers before enabling authorization. See the
“Specifying
Servers” section on page 21-17
or the
“Specifying RADIUS Servers” section on
page 21-24
for more information on server setup.
•
Configure RADIUS and keys to encrypt protocol packets before enabling authorization.
See the
“Specifying the Key” section on page 21-19
or the
“Specifying the RADIUS
Key” section on page 21-24
for more information on the key setup.
Configuring Authorization
These sections describe how to configure authorization on the switch.
•
Enabling Authorization, page 21-52
•
Disabling Authorization, page 21-53
Enabling Authorization
To enable authorization on the switch, perform this task in privileged mode:
This example shows how to enable EXEC mode authorization for both console and Telnet
connections. Authorization is configured with the
option. The fallback option is
deny
:
Console> (enable)
set authorization exec enable deny both
Successfully enabled enable authorization.
Console>
Task
Command
Step 1
Enable authorization for normal mode. Enter the
console
or
telnet
keyword if you want to enable
authorization only for console port or Telnet
connection attempts. Enter the
both
keyword to
enable authorization for both console port and
Telnet connection attempts.
set authorization exec enable
{
option
}{
fallbackoption
} [
console
|
telnet
|
both
]
Step 2
Enable authorization for enable mode. Enter the
console
or
telnet
keyword if you want to enable
authorization only for console port or Telnet
connection attempts. Enter the
both
keyword to
enable authorization for both console port and
Telnet connection attempts.
set authorization enable enable
{
option
}
{
fallbackoption
} [
console
|
telnet
|
both
]
Step 3
Enable authorization of configuration commands.
Enter the
console
or
telnet
keyword if you want to
enable authorization only for console port or
Telnet connection attempts. Enter the
both
keyword to enable authorization for both console
port and Telnet connection attempts.
set authorization commands enable
{
config
|
all
} {
option
}{
fallbackoption
} [
console
|
telnet
|
both
]
Step 4
Verify the authorization configuration.
show authorization
