HP ProCurve Secure 7102dl, Справочное руководство

Страница: 320 / 1455

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set
5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P. 318
aaa authorization exec
Use the aaa authorization exec command to set authorization lists for exec shell. This allows a user to
enter directly into Enable mode for new CLI sessions when authorized. For more detailed information on
authentication, authorization, and accounting (AAA) functionality, refer to the
Technology Review section
of the command aaa on on page 321. Use the no form of this command to remove a configured list of
authorization commands. Variations of this command include:
aaa authorization exec <listname> none
aaa authorization exec <listname> group <groupname>
aaa authorization exec <listname> group
aaa authorization exec <listname> if-authenticated
aaa authorization exec <listname> if-authenticated group <groupname>
aaa authorization exec <listname> if-authenticated group
aaa authorization exec default none
aaa authorization exec default group
<groupname>
aaa authorization exec default group
aaa authorization exec default if-authenticated
aaa authorization exec default if-authenticated group
<groupname>
aaa authorization exec default if-authenticated group
Syntax Description
default Specifies the default authorization list and applies it implicitly across all
lines.
group <groupname Specifies to use the named group remote server or the server for
authorization. Multiple groups can be specified. If the unit fails to make a
connection with the first group, it will try the next group specified. However,
if a connection is made to the first group and authorization fails, the unit will
not attempt authorization with any other groups in the list.
Specifies to use the server for authorization.
if-authenticated Succeeds if user has authenticated.
<listname> Specifies the name of the authorization list.
none Grants access automatically.
Default Values
By default, the authorization exec is disabled.