Specifications

3-436

Cisco Wide Area Application Services Command Reference

OL-21611-01

Chapter 3 CLI Commands

(config) aaa authorization commands

To authorize commands issued through the CLI by a user on a WAAS device, use the aaa authorization

commands global configuration command. To disable command authorization, use the no form of this

command.

aaa authorization commands level default tacacs+

no aaa authorization commands level default tacacs+

Syntax Description

Defaults AAA command authorization is disabled by default.

Command Modes global configuration

Device Modes application-accelerator

central-manager

Usage Guidelines Command authorization enforces authorization through an external AAA server for each command

executed by the user. All commands executed by a CLI user are authorized before they are executed.

When command authorization is configured for level 0, only EXEC commands are authorized, regardless

of user level (normal or super).

When command authorization is configured for level 15, EXEC and global configuration commands are

authorized, regardless of user level (normal or super).

Once it is configured, command authorization configuration is displayed in the running config. When

the running config is copied to the startup config, command authorization is configured as the last config

so that during the reload, the startup config need not be authorized.

Only commands executed through the CLI interface are subject to command authorization.

Examples The following example shows how to configure command authorization for level 15 (authorization for

both EXEC and global configuration commands) on the WAAS device:

WAE(config)# aaa authorization commands 15 default tacacs+

Related Commands show aaa authorization

level default tacacs+ Configures command authorization for commands issued by the CLI user.

Commands at the specified privilege level (0 or 15) are authorized. Level 0

authorizes EXEC commands, level 15 authorizes both EXEC and global

configuration commands.