To do… | Use the command… | Remarks | |
|
| Optional | |
|
| • | By default, command |
|
|
| authorization is not enabled. |
|
| • By default, the command level | |
|
|
| depends on the user privilege |
|
|
| level. A user is authorized a |
|
|
| command level not higher than |
|
|
| the user privilege level. With |
|
|
| command authorization |
|
|
| enabled, the command level for |
|
|
| a login user is determined by |
|
|
| both the user privilege level and |
Enable command authorization | command authorization |
| AAA authorization. If a user |
| executes a command of the | ||
|
|
| corresponding command level, |
|
|
| the authorization server checks |
|
|
| whether the command is |
|
|
| authorized. If yes, the command |
|
|
| can be executed. |
|
| • | Before enabling command |
|
|
| authorization, configure the |
|
|
| AAA authorization server. After |
you enable command authorization, only commands authorized by the AAA authorization server can be executed.
42