×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

authorization config-commands - doubts

Unanswered Question
Sep 16th, 2014
User Badges:

Hello Everyone,

So, for AAA Authorization,

When I issue : aaa authorization commands 15 default local. -> It will authorize every command on the exec for lvl 15.

The command above will overlap the: aaa authorization config-commands. ?!

 

I should use : aaa authorization config-commands. Just when i'm trying to authorize configuration commands ?!

 

 

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
nspasov Tue, 09/16/2014 - 17:57
User Badges:
  • Cisco Employee,
  • Cisco Designated VIP,

    2017 AAA, Identity and NAC Security

No, the aaa authorization config-commands is a must for the aaa authorization commands 15 default local to work. If the config-commands is missing from your config then no authorization will happen for level 15 commands. Take a look at this post:

https://supportforums.cisco.com/discussion/11409121/command-confusion-aaa-authorization-config-commands

 

Thank you for rating helpful posts!

Actions

This Discussion