Specifications

4-36
Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide
DOC-7810814=
Chapter 4 Administration
Access Service Security
Configuring Authorization (Network or EXEC)
The following global configuration commands configure network and EXEC authorization.
Step 1 Prevents unauthorized users from accessing network resources.
5800-1(config)# aaa authorization network
Step 2 Prevents users from logging in to the privileged EXEC facility.
5800-1(config)# aaa authorization exec
Step 3 Type Ctrl-Z to return to privileged EXEC mode.
5800-1(config)# Ctrl-Z
5800-1#
Step 4 Save your changes when ready.
5800-1# copy running-config startup-config
Note You can also require authorization before a user can issue specific commands by using the
aaa authorization command. For more information, refer to the security configuration
guide for your Cisco IOS release, which is part of the Cisco IOS configuration guides and
command references.
Specifying an Authorization Method
Authorization methods are defined as optional keywords in the aaa authorization command. The
following global configuration command configure both network and EXEC AAA authorization.
Table 4-5 defines authorization methods.
Step 1 Prevents unauthorized users from accessing network resources.
5800-1(config)# aaa authorization {if-authenticated | local | none | radius | tacacs+}
Step 2 Type Ctrl-Z to return to privileged EXEC mode.
5800-1(config)# Ctrl-Z
5800-1#
Step 3 Save your changes when ready.
5800-1# copy running-config startup-config