none: Does not perform authorization. An authenticated user gets the default user role. For more
information about the default user role, see Fundamentals Configuration Guide.
Usage guidelines
Command authorization restricts login users to execute only authorized commands by employing an
authorization server to verify whether or not each entered command is permitted.
After login, users can access the command lines permitted by their authorized user roles.
You can specify one command authorization method and multiple backup authorization methods. When
the default authorization method is invalid, the device attempts to use the backup authorization methods
in sequence. For example, the authorization command hwtacacs-scheme hwtacacs-scheme-name local
none command specifies the default HWTACACS authorization method and two backup authorization
methods, local authorization and no authorization. With this command, the device performs
HWTACACS authorization by default, performs local authorization when the HWTACACS server is
invalid, and does not perform command authorization when both of the previous methods are invalid.
Examples
# Configure ISP domain test to use local command authorization.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization command local
# Configure ISP domain test to use HWTACACS scheme hwtac for command authorization and use local
authorization as the backup authorization method.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization command hwtacacs-scheme hwtac local
Related commands
• authorization accounting (Fundamentals Command Reference)
• hwtacacs scheme
• local-user
authorization default
Use authorization default to specify the default authorization method for an ISP domain.
Use undo authorization default to restore the default.
Syntax
In non-FIPS mode:
authorization default { hwtacacs-scheme hwtacacs-scheme-name [ radius-scheme radius-scheme-name ]
[ local ] [ none ] | local [ none ] | none | radius-scheme radius-scheme-name [ hwtacacs-scheme
hwtacacs-scheme-name ] [ local ] [ none ] }
undo authorization default
13
To Next Page
Loading...
Need help?
General
