Dell N3200-ON Networking N-Series Switches User Guide version 6.8.0 - Page 295

Table 9-9. Default Administrative Profiles Name network-admin network-security router-admin multicast-admin dhcp-admin CP-admin network-operator Description Allows access to all commands. Allows access to network security features such as 802.1X, Voice VLAN, Dynamic ARP Inspection and IP Source Guard. Allows access to Layer 3 features such as IPv4 Routing, IPv6 Routing, OSPF, RIP, etc. Allows access to multicast features at all layers, this includes L2, IPv4 and IPv6 multicast, IGMP, IGMP Snooping, etc. Allows access to DHCP related features such as DHCP Server and DHCP Snooping. Allows access to the Captive Portal feature. Allows access to all User Exec mode commands and show commands. Authorization Examples Authorization allows the administrator to control which services a user is allowed to access. Some of the things that can be controlled with authorization include the user's initial privilege level and which commands the user is allowed to execute. When authorization fails, the user is denied access to the switch, even though the user has passed authentication. The following examples assume that the configuration used in the previous examples has already been applied. Local Authorization Example-Direct Login to Privileged Exec Mode Apply the following configuration to use the local user database for authorization, such that a user can enter Privileged Exec mode directly: aaa authorization exec "locex" local line telnet authorization exec locex exit Authentication, Authorization, and Accounting 295