Table of Contents
Advertisement
Chapter 5
Administering the Bridge
•
•
Authorization is bypassed for authenticated users who log in through the CLI even if authorization has
Note
been configured.
Beginning in privileged EXEC mode, follow these steps to specify TACACS+ authorization for
privileged EXEC access and network services:
Command
Step 1
configure terminal
Step 2
aaa authorization network tacacs+
Step 3
aaa authorization exec tacacs+
Step 4
end
Step 5
show running-config
Step 6
copy running-config startup-config
To disable authorization, use the no aaa authorization {network | exec} method1 global configuration
command.
Displaying the TACACS+ Configuration
To display TACACS+ server statistics, use the show tacacs privileged EXEC command.
Configuring the Bridge for Local Authentication and
Authorization
You can configure AAA to operate without a server by setting the bridge to implement AAA in local
mode. The bridge then handles authentication and authorization. No accounting is available in this
configuration.
Beginning in privileged EXEC mode, follow these steps to configure the bridge for local AAA:
Command
Step 1
configure terminal
Step 2
aaa new-model
OL-4059-01
Use TACACS+ for privileged EXEC access authorization if authentication was performed by using
TACACS+.
Use the local database if authentication was not performed by using TACACS+.
Purpose
Enter global configuration mode.
Configure the bridge for user TACACS+ authorization for all
network-related service requests.
Configure the bridge for user TACACS+ authorization to determine if the
user has privileged EXEC access.
The exec keyword might return user profile information (such as
autocommand information).
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Enable AAA.
Configuring the Bridge for Local Authentication and Authorization
Cisco Aironet 1400 Series Wireless Bridges Software Configuration Guide
5-15
Advertisement
Table of Contents
