Filter
Top Products
60-8
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 60 Router Device Administration
AAA Policy Page
• Command—Authorizes the use of all EXEC mode commands that are associated with specific
privilege levels.
Note You can use the method lists defined in this policy on the console and VTY lines that are
used to communicate with the device. See Console Policy Page, page 60-42 and VTY Line
Dialog Box—Authentication Tab, page 60-55.
Navigation Path
Go to the AAA Policy Page, page 60-6, then click the Authorization tab.
Related Topics
• Defining AAA Services, page 60-4
• Supported Authorization Types, page 60-2
• Understanding Method Lists, page 60-3
• AAA Server Group Dialog Box, page 6-46
• Filtering Tables, page 1-45
Field Reference
Table 60-3 AAA Page—Authorization Tab
Element Description
Network Authorization settings
Enable Network
Authorization
When selected, enables the authorization of network connections, such
as PPP, SLIP, or ARAP connections, using the methods defined in the
method list.
When deselected, network authorization is not performed.
Prioritized Method List Defines a sequential list of methods to be queried when authorizing a
user. Enter the names of one or more AAA server group objects (up to
four), or click Select to select them. Use the up and down arrows in the
object selector to define the order in which the selected server groups
should be used. If the object that you want is not listed, click the Create
button to create it.
The device tries initially to authorize users using the first method in the
list. If that method fails to respond, the device tries the next method,
and so on, until a response is received.
Supported methods include LDAP, RADIUS, TACACS+, Local, and
None.
Note RADIUS uses the same server for authentication and
authorization. Therefore, if you use define a RADIUS method
list for authentication, you must define the same method list for
authorization.
Note If you select None as a method, it must appear as the last
method in the list.
EXEC Authorization settings