Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

authorization

Hi all

What is the reason for command aaa authorization exec in IOS XR?

Command reference states that:

exec

Configures authorization for an interactive ( EXEC) session.

What does it mean "interactive" session and in what situation could it be helpful? If  IOS XR doesn't has enable mode...

___

TIA, Alex

Everyone's tags (1)
2 REPLIES
Cisco Employee

Hi Alex,EXEC mode is still

Hi Alex,

EXEC mode is still EXEC mode as in IOS regardless the fact if it is privileged (enable) or not. 

Treat it similar as in IOS.

Regards,

/A

Cisco Employee

Wanted to add one more piece

Wanted to add one more piece of detail:

the authorization phase of the exec session allows you to pass on, or use the received session parameters such as privilege level, task-group and all that.

Although priv-level in XR doesn't truly exist, in XR priv-lvl is merely a task group with permissions.

More detail on how to set it up can be found here:

https://supportforums.cisco.com/document/61306/asr9000xr-using-task-groups-and-understanding-priv-levels-and-authorization

The context of an "interactive" session is merely just a CLI with the device.

regards

xander

Xander Thuijs CCIE #6775 Principal Engineer ASR9000, CRS, NCS6000 & IOS-XR
49
Views
0
Helpful
2
Replies
CreatePlease to create content