Kentrox manual AI296 Version 9.8x User’s Guide

AI296 Version 9.8x User’s Guide

AI296 Commands: aaa

profile Associates a custom profile with a privilege level or range of privilege levels. The following rules apply:

z TACACS+ privilege levels range from 0 to 15.

z Custom profiles can be associated with privilege levels 2 through 14.

z Privilege levels 2 through 14 default to the management system profile.

z Privilege levels 0, 1, and 15 are reserved for the Status, Management, and Supervisor system profiles (respectively).



Note: For information on creating custom profiles, refer to command profile on page 9-76.

Privilege levels are used only if the authorization method is set to priv-lvl. The only exception to this occurs under all of the following conditions:

1.The authentication server returns a privilege level.

2.The authorization server cannot be reached.

3.The authorization is set to per-command and fallback is enabled.



Note: For information on configuring the authorization method, refer

to command aaa author.

The following parameters are accepted:

zdefault—Removes the association between a range of privilege levels and a profile.

zpriv_range—Defines the range of privilege levels that will be associated with the profile. Individual values are separated by commas (,) and hyphens (-). For example, 1,4-6specifies privilege levels 1, 4, 5, and 6.

zprofile_name—Specifies the name of an existing profile.

retry Configures the number of consecutive connection attempts that are made to a TACACS+ server before the attempt fails. Consecutive attempts are only made if the TACACS+ server responds but refuses a connection. If no response is received from a TACACS+ server before the configured timeout period, then no further connection attempts are made. For information on configuring the timeout period, refer to command aaa on page 9-6.

The following parameters are accepted:

zretry_count—Defines the number of consecutive connection attempts that are made. Valid values are 1 to 100.

zdefault—Resets the number of connection attempts to the default value.

9-9