246 AAA Commands
Default Configuration
Authorization is not enabled by default. Only TACACS is supported for
authorization. Setting a none method for authorization authorizes all
commands.
The following default Authorization Methods List is present by default:
Command Mode
Global Config mode
method
(
method1/method2
.
..)
The following authorization methods are supported:
• local – Perform local authorization (do not perform
authorization<Variable>—all commands are authorized).
• none – Do not perform authorization. All commands are
authorized.
• radius – Request authorization from the configured RADIUS
servers.
• tacacs – Request authorization from the configured
TACACS+ servers.
Default List Name Description Authorization Method
dfltCmdAuthList Default Command List None
dfltExecAuthList Default EXEC list None
Parameter Description
Authorization specifier:
exec Provides EXEC authorization. All methods are supported.
commands Performs authorization of user commands. Only none and
tacacs methods are supported.
network Performs RADIUS authorization of commands. Only the
default list is supported.
default The default list of methods for authorization services
(dfltCmdAuthList and dfltExecAuthList). Only the radius
method is supported.
2CSPC4.X8100-SWUM102.book Page 246 Friday, March 15, 2013 8:56 AM