ECS4110-28T_Management Guide

C HAPTER 13 | Security Measures
AAA Authentication, Authorization and Accounting
– 323 –
Figure 162: Displaying Statistics for AAA Accounting Sessions
CONFIGURING AAA
AUTHORIZATION
Use the Security > AAA > Authorization page to enable authorization of
requested services, and also to display the configured authorization
methods, and the methods applied to specific interfaces.
CLI REFERENCES
◆ "AAA" on page 838
COMMAND USAGE
◆ This feature performs authorization to determine if a user is allowed to
run an Exec shell.
◆ AAA authentication through a RADIUS or TACACS+ server must be
enabled before authorization is enabled.
PARAMETERS
These parameters are displayed:
Configure Method
◆ Authorization Type – Specifies the service as:
■
Command – Administrative authorization to apply to commands
entered at specific CLI privilege levels.
■
Exec – Administrative authorization for local console, Telnet, or
SSH connections.
◆ Method Name – Specifies an authorization method for service
requests. The “default” method is used for a requested service if no
other methods have been defined. (Range: 1-64 characters)
◆ Server Group Name - Specifies the authorization server group.
(Range: 1-64 characters)
The group name “tacacs+” specifies all configured TACACS+ hosts (see
"Configuring Local/Remote Logon Authentication" on page 311). Any
other group name refers to a server group configured on the TACACS+
Group Settings page. Authorization is only supported for TACACS+
servers.