D-Link DXS-3600-EM-8XS CLI Guide - Page 60

DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to enable the AAA authorization console function. The authorization method list, applied to the console line, via the Authorization EXEC Line Configuration command, will take effect. DXS-3600-32S#configure terminal DXS-3600-32S(config)#aaa authorization console DXS-3600-32S(config)# 6-7 authorization exec This command is used to authorize the users logged in the NAS CLI and assign the authority level. The no form of this command is used to disable the aaa authorization exec function. authorization exec {default | list-name} no authorization exec Parameters default list-name Specifies to use the default method of Exec authorization. Specifies to apply a defined method list of Exec authorization. Default Command Mode Command Default Level Usage Guideline The default value is disabled. Line Configuration Mode. Level: 15 Once the default exec authorization method list has been configured, it is applied to all terminals automatically. Once the non-default command authorization method list has been configured, it is applied to the line instead of the default method list. If you attempt to apply an undefined method list, a warning message will prompt that the exec authorization in this line is ineffective till the authorization method list is defined. Example This example shows how to configure the EXEC authorization method list, with the name of 'list-1', that uses the RADIUS server. If the security server does not respond, it will not perform authorization. After the configuration, the authorization command is applied to the console. DXS-3600-32S#configure terminal DXS-3600-32S(config)#aaa authentication login login-1 group tacacs+ local DXS-3600-32S(config)#aaa authorization exec list-1 group radius none DXS-3600-32S(config)#aaa authorization console DXS-3600-32S(config)#line console DXS-3600-32S(config-line)#authorization exec list-1 DXS-3600-32S(config-line)#login authentication login-1 DXS-3600-32S(config-line)#exit DXS-3600-32S(config)# 6-8 aaa accounting exec This command is used to account users in order to count the manage user activities. The no form of this command is used to disable the accounting function. aaa accounting exec {default | list-name} start-stop method1 [method2...] no aaa accounting exec {default | list-name} 52