Command to enable authorization

Syntax:


[no] aaa authorization commands <radius|tacacs|local|auto|none>

[no] aaa authorization commands access-level <manager|all>

These commands are used to enable TACACS+ authorization.

Brief description of TACACS authorization options:
Local

Locally authenticated clients goes through local authorization. No authentication is performed for RADIUS/TACACS+ authenticate clients.

RADIUS

Locally authenticated clients go through local authorization. RADIUS authenticated clients go through RADIUS authorization. No authorization is performed for TACACS+ authenticated clients.

TACACS

TACACS authenticated clients go through TACACS authorization. No authorization is performed for RADIUS/locally authenticated users.

Auto

Uses the same method as Authentication and Authorization. For example local/radius/tacacs authenticated clients will go through local/radius/tacacs authorization respectively.

Authorization method:

Manager

Enables authorization for manager level commands.

All

Enables authorization for all commands. This is the default option.