Juniper JUNOSe 11.1, Руководство по настройке

Страница: 462 / 640

■
Use the no version to remove the authentication list from your configuration.
■
See aaa authentication login.
aaa authorization
■
Use to set the parameters that restrict access to a network.
■
Use the keyword exec to determine if the user is allowed to run Exec mode
commands. The commands that you can execute from Exec mode provide only
user-level access.
■
Use the keyword commands to run authorization for all commands at the
specified privilege level (0–15). See Table 45 on page 421 for a description of
privilege levels.
■
You can enter up to three authorization types to use in an authorization method
list. Options include:
if-authenticated, none , and .
NOTE: For information about , see JUNOSe Broadband Access Configuration
Guide .
■
Authorization method lists define the way authorization is performed and the
sequence in which the methods are performed. You can designate one or more
security protocols in the method list to be used for authorization. If the initial
method fails, the next method in the list is used. The process continues until
either there is successful communication with a listed authorization method or
all methods defined are exhausted.
■
Example
host1(config)# aaa authorization exec
■
Use the no version to delete the method list.
■
See aaa authorization.
aaa authorization config-commands
■
Use to reestablish the default created when the aaa authorization commands
command was issued.
■
After the aaa authorization commands command has been issued, aaa
authorization config-commands is enabled by default, which means that all
configuration commands are authorized.
■
Example
host1(config)# aaa new-model
host1(config)# aaa authorization command 15 parks none
host1(config)# no aaa authorization config-commands
■
Use the no version to disable AAA configuration command authorization.
■
See aaa authorization config-commands.
432 ■
Vty Line Authentication and Authorization
JUNOSe 11.1.x System Basics Configuration Guide