D-Link DXS-3600-EM-8T CLI Guide - Page 59

Parameters default list-name method DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide When this parameter is used, the following defined method list is used as the default method for Exec authorization. Name of the user authorization method list. After the user-defined authorization method list created, you can use authorization exec line configuration command to apply the authorization method list to the specified terminal lines. Syntax "{local | none | group {radius | tacacs+ | group_name}}". Up to four methods supported: local - Use the local user name database for authorization. none - Do not perform authorization. group - Can be followed by radius or tacas+ or a group_name "group radius" means use all RADIUS servers group "group tacacs+" means use all TACACS+ server group. "group group_name" is the specific group created via aaa group server global configuration command. Default Command Mode Command Default Level Usage Guideline The default value is disabled. Global Configuration Mode. Level: 15 It supports authorization of users logged in the NAS CLI and assignment of CLI authority level (0-15). The aaa authorization exec function is effective on condition that Login authentication function has been enabled. It can not enter the CLI if it fails to enable the aaa authorization exec. You must apply the exec authorization method to the terminal line; otherwise the configured method is ineffective. Example This example shows how to use the RADIUS server to authorize EXEC. After the authorization method list, called 'list-1' has been created, you can use the Authorization EXEC Line Configuration command to apply this method list to the console, SSH, or other terminals. DXS-3600-32S#configure terminal DXS-3600-32S(config)#aaa authorization exec list-1 group radius DXS-3600-32S(config)# 6-6 aaa authorization console This command is used to enable authorization function for users who has logged in the console. The no form of this command is used to disable the authorization function. aaa authorization console no aaa authorization console Parameters Default Command Mode Command Default Level Usage Guideline None. The default option is disabled. Global Configuration Mode. Level: 15 It supports to identify the users logged in from the console and from other terminals, configure whether to authorize the users logged in from the console or not. If the command authorization function is disabled on the console, the authorization method list applied to the console line is ineffective. 51