Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

aaa authorization command

Hi,

What is the difference between below two commands, I am interested to know only bold portion.

aaa authorization exec default group radius none

aaa authorization network default group radius none

Regards

Siva Kondala Rao

3 REPLIES

Re: aaa authorization command

Hi Siva,

Both are for different purpose. EXEC is used mainly for managing the router/switch,; whereas NETWORK is used for authenticating services like PPP, SLIP, etc...

IOS supports three different types of authorization:

EXEC: Applies to the attributes associated with a user EXEC terminal session.

Command: Applies to the EXEC mode commands a user issues. Command authorization attempts authorization for all EXEC mode commands, including global configuration commands, associated with a specific privilege level.

Network: Applies to network connection. This can include a PPP, SLIP, or ARAP connection.

HTH,

Smitesh

PS: Please rate helpful posts...

New Member

Re: aaa authorization command

Hi Smitesh,

Can you explain further: what are user EXEC terminal attributes? and I don't understand network connection authorization. when we will use it (can you give one example)? Your patience is appreciated.

Regards

Siva Kondala Rao

aaa authorization command

Hi Siva,

EXEC attributes are those related to doing something on the router ( managing router), for example who loged in, did what changed, Is is supposed to have that authorization to make changes on configuration, etc...

Whereas, Network is for authentication. For example, like in PPP CHAP or PAP, you can have username password configure on the device itself; or else you have have those be authenticated by external Radius/ TACACs servers...

HTH,

Smitesh

PS: Please rate helpful posts..

430
Views
5
Helpful
3
Replies