Motorola BSR 2000, Руководство по настройке и управлению

Страница: 106 / 650

BSR 2000 Configuration and Management Guide Release 1.0
3-56 MGBI 526360-001-00 Rev. B
Configuring Administrative Authentication
Configuring AAA administrative authentication determines if a user can access
privilege level 15 (system administrator) on the BSR by establishing one or more
authentication methods that are invoked when an attempt is made to access this
privilege level. If multiple authentication methods are specified, the methods are
invoked in the sequence that they were specified.
Use the aaa authentication enable command, in Global Configuration mode, to
enable AAA administrative authentication, as follows:
MOT
(config)#
aaa authentication enable { enable | local | none | radius | tacacs }
where:
enable uses the enable password command setup as the authentication method.
local uses the local database as the authentication method.
none uses no method as the authentication method.
radius uses RADIUS as the authentication method.
tacacs uses as the authentication method.
Configuring Local Authentication Through Local Override
Enabling local override authentication configures the BSR to first check the local user
database for authentication information before attempting to use another form of
authentication.
Use the aaa authentication local-override command, in Global Configuration mode,
to enable local authentication. This command overrides any configured default
authentication method. A configured default authentication method will be used only
if local authentication fails.
MOT
(config)#
aaa authentication local-override
Configuring AAA Authorization
AAA authorization is used to determine if a user has permission to run a process or a
command or which privilege levels (command modes) a user has access to.
Configuring AAA authorization on the BSR involves the following tasks:
■
Configuring Command Authorization
■
Configuring Privilege Level Authorization