2-261
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set authorization exec
set authorization exec
To enable authorization of exec (normal mode) session events on the switch, use the set authorization
exec command.
set authorization exec enable {option} {fallbackoption} [console | telnet | both]
set authorization exec disable [console | telnet | both]
Syntax Description
Defaults The default is authorization is denied.
Command Types Switch command.
Command Modes Privileged.
Usage Guidelines When you define the option and fallbackoption values, the following occurs:
•tacacs+ specifies the TACACS+ authorization method.
•deny fails authorization if the TACACS+ server does not respond.
•if-authenticated allows you to proceed with your action if the TACACS+ server does not respond
and you have authentication.
•none allows you to proceed without further authorization if the TACACS+ server does not respond.
Examples This example shows how to enable authorization of configuration commands in exec (normal mode)
session events:
Console> (enable) set authorization exec enable if-authenticated none
Successfully enabled exec authorization.
Console> (enable)
enable Enables the specified authorization method.
option Switch response to an authorization request; valid values are tacacs+,
if-authenticated, and none. See the “Usage Guidelines” section for valid value
definitions.
fallbackoption Switch fallback response to an authorization request if the TACACS+ server is
down or not responding; valid values are tacacs+, deny, if-authenticated, and
none. See the “Usage Guidelines” section for valid value definitions.
disable Disables authorization method.
console (Optional) Specifies the authorization method for console sessions.
telnet (Optional) Specifies the authorization method for Telnet sessions.
both (Optional) Specifies the authorization method for both console and Telnet sessions.