Configuration Guide Configuring AAA
Authorization method-list:
aaa authorization exec list2 group radius local
Ruijie# show running-config
aaa new-model
!
aaa authorization exec list2 group local
aaa authentication login list1 group radius local
!
username user password pass
username user privilege 6
!
radius-server host 10.1.1.1
radius-server key 7 093b100133
!
line con 0
line vty 0 4
authorization exec list2
login authentication list1
!
End
 Configuring AAA Command Authorization
Provide command authorization for login users according to the following default authorization method: Authorize level-15
commands first by using a TACACS+ server. If the TACACS+ server does not respond, local authorization is performed.
Authorization is applied to the users who log in through the Console and the users who log in through other types of clients.
Step 1: Enable AAA.
Step 2: Configure a RADIUS or TACACS+ server in advance if remote server-group authorization needs to
be implemented. If local authorization needs to be implemented, configure the local user database
information on the NAS.