D-Link DXS-3600-16S, Руководство пользователя

Страница: 60 / 695

DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
52
6-7 authorization exec
This command is used to authorize the users logged in the NAS CLI and assign the authority level. The no form of this
command is used to disable the aaa authorization exec function.
authorization exec {default | list-name }
no authorization exec
Parameters
6-8 aaa accounting exec
This command is used to account users in order to count the manage user activities. The no form of this command is
used to disable the accounting function.
aaa accounting exec {default | list-name } start-stop method1 [ method2... ]
no aaa accounting exec {default | list-name }
Example This example shows how to enable the AAA authorization console function. The
authorization method list, applied to the console line, via the Authorization EXEC
Line Configuration command, will take effect.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#aaa authorization console
DXS-3600-32S(config)#
default Specifies to use the default method of Exec authorization.
list-name Specifies to apply a defined method list of Exec authorization.
Default The default value is disabled.
Command Mode Line Configuration Mode.
Command Default Level Level: 15
Usage Guideline Once the default exec authorization method list has been configured, it is applied to
all terminals automatically. Once the non-default command authorization method list
has been configured, it is applied to the line instead of the default method list. If you
attempt to apply an undefined method list, a warning message will prompt that the
exec authorization in this line is ineffective till the authorization method list is defined.
Example This example shows how to configure the EXEC authorization method list, with the
name of ‘list-1’, that uses the RADIUS server. If the security server does not
respond, it will not perform authorization. After the configuration, the authorization
command is applied to the console.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#aaa authentication login login-1 group local
DXS-3600-32S(config)#aaa authorization exec list-1 group radius none
DXS-3600-32S(config)#aaa authorization console
DXS-3600-32S(config)#line console
DXS-3600-32S(config-line)#authorization exec list-1
DXS-3600-32S(config-line)#login authentication login-1
DXS-3600-32S(config-line)#exit
DXS-3600-32S(config)#