User's Manual

100
Example of Local EXEC Authorization
The following example shows how to perform the local authorization and local authorization by configuring the
SWITCH:
aaa authentication login default local
aaa authorization exec default local
!
localauthor a1
exec privilege default 15
!
local author-group a1
username exec1 password 0 abc
username exec2 password 0 abc author-group a1
username exec3 password 0 abc maxlinks 10
username exec4 password 0 abc autocommand telnet 172.16.20.1
!
The following shows the meaning of each command line:
 The aaa authentication login default local command is used to define the default login-
authentication method list, which will be automatically applied to all login authentication
services.
 The command is used to define the default EXEC authorization method list, which will be
automatically applied to all users requiring to enter the EXEC shell.
 Command localauthor al defines a local authority policy named al. Command exec privilege
default 15 means the privileged level of exec login user is 15 by default.
 Command local author-group a1 means apply the local authorization policy a1 to global
configuration (the default local policy group).
 Command username exec1 password 0 abc defines an account exec1 with password abc
in the global configuration mode.
 Command username exec2 password 0 abc author-group a1 defines an account exec 2 with
password abc in the global configuration mode. The account is applied to the local
authorization policy a1.
 Command username exec3 password 0 abc maxlinks 10 defines an account exec 3 with
password abc in the global configuration mode. The account makes 10 users available
simultaneously.
 Command username exec4 password 0 abc autocommand telnet 172.16.20.1 defines an
account exec4 with password abc. telnet 172.16.20.1 is automatically run when the user
login the account.
8.4 AAA Accounting Configuration
8.4.1 AAA Accounting Configuration Task List
 Configuring Connection Accounting using AAA
 Configuring Network Accounting using AAA
8.4.2 AAA Accounting Configuration Task