Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 466 / 943

Configuration Guide AAA Configuration
Command Function
authorization
exec { default | list-name }
Apply the method list.
end Return to the privileged mode.
show running-config Confirm the configuration.
Using Radius for exec authorization
To configure the use of RADIUS server for Exec authorization, it is required to first configure
the RADIUS server. For the details of the RADIUS server configuration, see Configuring
RADIUS .
After configuring the RADIUS server, the RADIUS server-based method list can be configured.
Run the following commands in the global configuration mode:
Command Function
configure terminal Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa authentication enable
{ default |
list-name }
group radius
Define RADIUS authentication method.
end
Return to the privileged mode.
show aaa method-list Confirm the configured method list.
configure terminal Enter the global configuration mode.
line vty line-num
Enter the line configuration mode.
authorization
exec { default | list-name }
Apply the method list.
end Return to the privileged mode.
show running-config Confirm the configuration.
Example of Configuring Exec Authorization
The example below illustrates how to configure exec authorization. The local login
authentication and the
“local” exec authorization are used when the user on the vty
line 0-4 loggs in. The access server uses the Radius server with IP address 192.168.217.64
and shared keyword test. The local username and password are Ruijie, and the privilege level
is 6 .
Ruijie# configure terminal
Ruijie(config)# aaa new-model
Ruijie(config)# radius-server host 192.168.217.64
Ruijie(config)# radius-server key test
Ruijie(config)# username Ruijie password Ruijie
Ruijie(config)# username Ruijie privilege 6
Ruijie(config)# aaa authentication login mlist1 local
Ruijie(config)# aaa authentication exec mlist2 group radius local
Ruijie(config)# line vty 0 4