Administrator Guide

Switch Management Commands 1997
• list-name —Character string used to name the list of authorization
methods. The list name can consist of any printable character other than a
question mark. Use quotes around the list name if embedded blanks are
contained in the list name.
Default Configuration
Authorization is not enabled on any line method by default.
Command Mode
Line console, line telnet, line SSH
User Guidelines
When command authorization is configured for a line-mode, the switch
sends information about the entered command to the method specified in
the command list. The authorization method validates the received
command and responds with either a PASS or FAIL response. If approved, the
command is executed. Otherwise, the command is denied and an error
message is shown to the user. If contact with the authorization method fails,
then the next method in the list is attempted.
Examples
Use the following command to enable TACACS command authorization for
telnet.
console(config)#line telnet
console(config-telnet)# authorization commands mycmdAuthList
enable authentication
Use the enable authentication command in Line Configuration mode to
specify the authentication method list when accessing a higher privilege level
from a remote telnet or console. To return to the default specified by the
enable authentication command, use the no form of this command.
Syntax
enable authentication {default | list-name }
no enable authentication
2CSNXXX_SWUM204.book Page 1997 Monday, January 25, 2016 1:25 PM