Filter
Top Products
AI232 Version 9.6x User’s Guide
AI232 Commands: aaa profile
8-12
aaa profile
Description
This command associates a custom profile with a privilege level or range of privilege
levels. The following rules apply:
z TACACS+ privilege levels range from 0 to 15.
z Custom profiles can be associated with privilege levels 2 through 14.
z Privilege levels 2 through 14 default to the management system profile.
z Privilege levels 0, 1, and 15 are reserved for the Status, Management, and
Supervisor system profiles (respectively).
For information on creating custom profiles, refer to command profile on page 8-78
.
Privilege levels are used only if the authorization method is set to
priv-lvl. The only
exception to this occurs under all of the following conditions:
1. The authentication server returns a privilege level.
2. The authorization server cannot be reached.
3. The authorization is set to per-command and fallback is enabled.
For information on configuring the authorization method, refer to command aaa
author on page 8-8.
Command Type
shell
Formats
aaa profile {
priv_range
} {
profile_name
| default }
Parameters
Command Defaults
No associations configured
priv_range
Defines the range of privilege levels that will be associated with
the profile. Individual values are separated by commas (,) and
hyphens (-). For example,
1,4-6 specifies privilege levels 1, 4, 5,
and 6.
profile_name
Specifies the name of an existing profile.
default
Removes the association between a range of privilege levels and
a profile.