Reference Guide

Format aaa authorization {commands|exec} {default|list-name}
method1[method2]
Mode Global Config
Parameter Description
commands Provides authorization for all user-executed commands.
exec Provides exec authorization.
default The default list of methods for authorization services.
list-name
Alphanumeric character string used to name the list of authorization methods.
method
TACACS+/RADIUS/Local and none are supported.
The following shows an example of the command:
(Extreme 220) (Routing) #
(Extreme 220) (Routing) #configure
(Extreme 220) (Config) (Config)#aaa authorization exec default tacacs+ none
(Extreme 220) (Config) (Config)#aaa authorization commands default tacacs+ none
no aaa authorization
This command deletes the authorization method list.
Format
no aaa authorization {commands|exec} {default|list-name}
Mode Global Config
authorization commands
This command applies a command authorization method list to an access method (console, telnet, ssh).
For usage scenarios on per command authorization, see the command aaa authorization on page 67.
Format
authorization commands [default|list-name]
Mode Line console, Line telnet, Line SSH
Parameter Description
commands This causes command authorization for each command execution attempt.
The following shows an example of the command:
(Extreme 220) (Config) #line console
(Extreme 220) (Config-line)#authorization commands list2
(Extreme 220) (Config-line)#exit
no authorization commands
This command removes command authorization from a line config mode.
Management Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 68