tacacs-authorization
This command configures TACACS+ authorization of users.
Syntax
(config-system)# tacacs-settings (tacacs)# authorization
(tacacs-authorization)#
|
Command |
Description |
|---|---|
|
command-tacacs-plus {off|on} |
Enables TACACS+ for CLI command authorization, determining if the user is allowed to execute a specific command. |
|
default-access-level {admin|monitor|security-admin} |
Defines which user (access) level the device assigns to the user if no mapping exists between the received TACACS+ privilege level from the TACACS+ server and the device's user level. |
|
enable-if-authenticated-tacacs-plus {off|on} |
Enables the use of the local password for CLI Privileged mode when the user is authenticated by TACACS+. |
|
login-tacacs-plus {off|on} |
Enables TACACS+ user authorization (privilege level) for the Web interface and CLI. |
Command Mode
Privileged User
Example
This example enables TACACS+ authorization:
(config-system)# tacacs-settings (tacacs)# authorization
(tacacs-authorization)# login-tacacs-plus on