Kentrox AI232 manual Aaa profile, Profile. Individual values are separated by commas

Models: AI232

1 322
Download 322 pages 30.19 Kb
Page 184
Image 184

AI232 Version 9.6x User’s Guide

AI232 Commands: aaa profile

aaa profile

Description

This command associates a custom profile with a privilege level or range of privilege levels. The following rules apply:

zTACACS+ privilege levels range from 0 to 15.

zCustom profiles can be associated with privilege levels 2 through 14.

zPrivilege levels 2 through 14 default to the management system profile.

zPrivilege levels 0, 1, and 15 are reserved for the Status, Management, and Supervisor system profiles (respectively).

For information on creating custom profiles, refer to command profile on page 8-78.

Privilege levels are used only if the authorization method is set to priv-lvl. The only exception to this occurs under all of the following conditions:

1.The authentication server returns a privilege level.

2.The authorization server cannot be reached.

3.The authorization is set to per-command and fallback is enabled.

For information on configuring the authorization method, refer to command aaa author on page 8-8.

Command Type

shell

Formats

aaaprofile { priv_range } { profile_name default }

Parameters

priv_range

Defines the range of privilege levels that will be associated with

 

the profile. Individual values are separated by commas (,) and

 

hyphens (-). For example, 1,4-6specifies privilege levels 1, 4, 5,

 

and 6.

profile_name

Specifies the name of an existing profile.

default

Removes the association between a range of privilege levels and

 

a profile.

Command Defaults

No associations configured

8-12

Page 184
Image 184
Kentrox AI232 Aaa profile, Profile. Individual values are separated by commas, Specifies the name of an existing profile