Hi,

I have a question about AAA commands. In aaa, I have defined the following:

aaa new-model
!
aaa authentication login default group tacacs+ local enable

aaa authorization console
aaa authorization config-commands
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization commands 0 default group tacacs+ local if-authenticated
aaa authorization commands 1 default group tacacs+ local if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated

aaa accounting exec default start-stop group tacacs+
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!
aaa session-id common

line con 0
authorization exec con_acc
login authentication con_acc

Based on that configuration, I guess that the router uses the default method. There is none method called  con_acc either for authentication or authorization, so I understand that when  the router fails to get the method espicified, it has to look for default.

Could some one clarify.

Thanks,