tacacs-authorization

This command configures TACACS+ authorization of users.

Syntax

(config-system)# tacacs-settings
(tacacs)# authorization
(tacacs-authorization)#

Command

Description

command-tacacs-plus {off|on}

Enables TACACS+ for CLI command authorization, determining if the user is allowed to execute a specific command.

default-access-level {admin|monitor|security-admin}

Defines which user (access) level the device assigns to the user if no mapping exists between the received TACACS+ privilege level from the TACACS+ server and the device's user level.

enable-if-authenticated-tacacs-plus {off|on}

Enables the use of the local password for CLI Privileged mode when the user is authenticated by TACACS+.

login-tacacs-plus {off|on}

Enables TACACS+ user authorization (privilege level) for the Web interface and CLI.

Command Mode

Privileged User

Example

This example enables TACACS+ authorization:

(config-system)# tacacs-settings
(tacacs)# authorization
(tacacs-authorization)# login-tacacs-plus on