21-53
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
78-13315-02
Chapter 21 Configuring Switch Access Using AAA
Configuring Authorization
This example shows how to enable enable mode authorization for console and Telnet
connections. Authorization is configured with the
option. The fallback option is
deny
:
Console> (enable)
set authorization enable enable deny both
Successfully enabled enable authorization.
Console>
This example shows how to enable command authorization for both console and Telnet
connections. Authorization is configured with the
option. The fallback option is
deny
:
Console> (enable)
set authorization commands enable config deny both
Successfully enabled commands authorization.
Console> (enable)
This example shows how to verify the configuration:
Console> (enable)
show authorization
Telnet:
-------
Primary Fallback
------- --------
exec: deny
enable: deny
commands:
config: deny
all: - -
Console:
--------
Primary Fallback
------- --------
exec: deny
enable: deny
commands:
config: deny
all: - -
Console> (enable)
Disabling Authorization
To disable authorization on the switch, perform this task in privileged mode:
Task
Command
Step 1
Disable authorization for normal mode. Enter the
console
or
telnet
keyword if you want to disable
authorization only for console port or Telnet
connection attempts. Enter the
both
keyword to
disable authorization for both console port and
Telnet connection attempts.
set authorization exec disable
[
console
|
telnet
|
both
]
Step 2
Disable authorization for enable mode. Enter the
console
or
telnet
keyword if you want to disable
authorization only for console port or Telnet
connection attempts. Enter the
both
keyword to
disable authorization for both console port and
Telnet connection attempts.
set authorization enable disable
[
console
|
telnet
|
both
]