Quick Reference Guide

AAA Commands 225
• exec — Provides EXEC authorization. All methods are supported.
• commands — Performs authorization of user commands. Only none and
TACACs methods are supported.
• network — Performs RADIUS authorization. Only the default list is supported.
• default — The default list of methods for authorization services . The list
dfltCmdAuthList is the default list for command authorization and the
list dfltExecAuthList is the default list for EXEC authorization.
•
list-name — Character string used to name the list of authorization methods.
The list name can consist of any alphanumeric character up to 15 characters in
length. Use quotes around the list name if embedded blanks are contained in the
list name.
• method —The following authorization methods are supported:
– local—Perform local authorization (do not perform authorization—all
commands are authorized).
– none—Do not perform authorization. All commands are authorized.
– radius—Request authorization from the configured RADIUS servers.
– tacacs—Request authorization from the configured TACACS+
servers.
Default Configuration
Authorization is not enabled by default. Authorization supports EXEC
authorization and command authorization. Only TACACS is supported for
command authorization. Setting a none method for authorization authorizes
EXEC access or all commands.
The following default Authorization Methods List is present by default:
Command Mode
Global Configuration mode
Default List Name Description Authorization Method
dfltCmdAuthList Default Command List None
dfltExecAuthList Default EXEC list None
2CSNXXX_SWUM200.book Page 225 Tuesday, December 10, 2013 1:22 PM