HP 6125XLG R2306-HP 6125XLG Blade Switch Security Command Reference - Page 20
authorization default, Predefined user roles, Parameters, Usage guidelines, Examples, Related commands
View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 20 highlights
Predefined user roles network-admin Parameters hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, a case-insensitive string of 1 to 32 characters. local: Performs local authorization. none: Does not perform authorization. The authorization server does not verify whether the entered commands are permitted by the user role. The commands are executed successfully if the user role has permission to the commands. Usage guidelines Command authorization restricts login users to execute only authorized commands by employing an authorization server to verify whether or not each entered command is permitted. After login, users can access the command lines permitted by their authorized user roles. You can specify one command authorization method and multiple backup authorization methods. When the default authorization method is invalid, the device attempts to use the backup authorization methods in sequence. For example, the authorization command hwtacacs-scheme hwtacacs-scheme-name local none command specifies the default HWTACACS authorization method and two backup authorization methods, local authorization and no authorization. With this command, the device performs HWTACACS authorization by default, performs local authorization when the HWTACACS server is invalid, and does not perform command authorization when both of the previous methods are invalid. Examples # Configure ISP domain test to use local command authorization. system-view [Sysname] domain test [Sysname-isp-test] authorization command local # Configure ISP domain test to use HWTACACS scheme hwtac for command authorization and use local authorization as the backup authorization method. system-view [Sysname] domain test [Sysname-isp-test] authorization command hwtacacs-scheme hwtac local Related commands • authorization accounting (Fundamentals Command Reference) • hwtacacs scheme • local-user authorization default Use authorization default to specify the default authorization method for an ISP domain. Use undo authorization default to restore the default. Syntax In non-FIPS mode: 11