User's Manual

119
Users Manual of CS-6306R
6.1.8 AAA Authorization Example
EXEC local authorization example
aaa authentication login default local
aaa authorization exec default local
!
username exec1 password 0 abc privilege 15
username exec2 password 0 abc privilege 10
username exec3 nopassword
username exec4 password 0 abc user-maxlinks 10
username exec5 password 0 abc autocommand telnet 172.16.20.1
!
The lines in this sample RADIUS authorization configuration are defined as follows: :
 The aaa authentication login default local command defines the default method list of login authentication.
This method list applies to all login authentication servers automatically.
 The aaa authorization exec default local command defines default method list of exec authorization. The
method list automatically applies to all users that need to enter exec shell.
 Username is exec1, login password is abc, EXEC privileged level is 15 (the highest level), that is, when
user exec1 whose privileged level is 15 logs in exec shell, all commands can be checked and performed.
 Username is exec2, login password is abc, EXEC privileged level is 10, that is, when user exec2 whose
privileged level is 10 logs in EXEC shell, commands with privileged level less than 10 can be checked and
performed.
 Username is exec3; no password is needed for login.
 Username is exec4; login password is abc，the maximum links of the user is 10.
 Username is exec5; login password is abc, user performs telnet 172.16.20.1 immediately when logging in
exec shell.
6.1.9 AAA Accounting Configuration Task List
 Configuring Connection Accounting using AAA
 Configuring Network Accounting using AAA
6.1.10 AA Accounting Configuration Task
To configure AAA accounting, perform the following configuration processes:
(1) If you decide to use a separate security server, configure security protocol parameters, such as RADIUS,
TACACS+, or Kerberos.
(2) Define the method lists for accounting by using an AAA accounting command.
(3) Apply the method lists to a particular interface or line, if required.