Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.7 - Page 961

- radius-Request authorization from the configured RADIUS servers. - tacacs-Request authorization from the configured TACACS+ servers. Default Configuration When authorization is enabled, the switch attempts to authorize the listed function using the configured method. Authorization is not enabled by default. Authorization supports Exec authorization and network authorization for RADIUS. Only TACACS is supported for command authorization. Setting a none or local method for authorization authorizes Exec access for all functions. The following default Authorization Methods List is present by default: Default List Name dfltCmdAuthList dfltExecAuthList Description Default Command List Default Exec list Authorization Method None None Command Mode Global Configuration mode User Guidelines A maximum of five authorization method lists may be created for exec and command types. The default methods may not be deleted. When command authorization is configured for a line mode, the switch sends information about the entered command to the AAA server. The AAA server validates the received command and responds with a PASS or FAIL. If a PASS response is received, the command is executed. If a FAIL response is received, the command is not executed and a message is displayed to the user. Command authorization attempts authorization for all Exec mode commands associated with a privilege level, including global configuration commands. Exec authorization attempts authorization when a user attempts to enter Privileged Exec mode. Security Commands 961