Administrator Guide

Security Commands 871
console(config)#aaa authorization exec exec-list radius none
Apply the AML to an access line mode (SSH):
console(config)#line ssh
console(config-ssh)#authorization exec exec-list
Display the authorization methods:
console#show authorization methods
Exec Authorization List Methods
---------------------------- ------------------------------
dfltExecAuthList none
exec-list radius none
Command Authorization List Methods
---------------------------- ------------------------------
dfltCmdAuthList none
telnet-list tacacs
Line Exec Method Lists Command Method Lists
--------- --------------------- ---------------------
Console dfltExecAuthList dfltCmdAuthList
Telnet dfltExecAuthList telnet-list
SSH exec-list dfltCmdAuthList
Network Authorization Methods
---------------------- -------
Dot1x none
aaa authorization network default radius
Use the aaa authorization network default radius command in Global
Configuration mode to enable the switch to accept VLAN assignment by the
RADIUS server.
Syntax
aaa authorization network default radius
no aaa authorization network default radius
Default Configuration
By default, the switch does not accept VLAN assignments by the RADIUS
server.
2CSNXXX_SWUM204.book Page 871 Monday, January 25, 2016 1:25 PM