Filter
Top Products
60-46
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 60 Router Device Administration
Console Policy Page
• Console Page—Authentication Tab, page 60-44
• Console Page—Accounting Tab, page 60-47
• VTY Line Dialog Box—Authorization Tab, page 60-56
• Filtering Tables, page 1-45
Field Reference
Table 60-18 Console Page—Authorization Tab
Element Description
EXEC Authorization settings
Authorize EXEC Operations
Using
The authorization method that determines whether a user is allowed to
run an EXEC session:
• None—Authorization is not performed. This is the default.
• AAA Policy Default List—Uses the default authorization method
list that is defined in the device’s AAA policy. See AAA
Page—Authorization Tab, page 60-7.
• Custom Method List—Uses the authorization methods specified in
the EXEC Method List field.
Prioritized Method List Applies only when Custom Method List is selected as the EXEC
method.
Defines a sequential list of methods to be queried when authorizing a
user. Enter the names of one or more AAA server group objects (up to
four), or click Select to select them. Use the up and down arrows in the
object selector to define the order in which the selected server groups
should be used. If the object that you want is not listed, click the Create
button to create it.
The device tries initially to authorize users using the first method in the
list. If that method fails to respond, the device tries the next method,
and so on, until a response is received.
Note If you select None as a method, it must appear as the last
method in the list.
Note RADIUS uses the same server for authentication and
authorization. Therefore, if you use define a RADIUS method
list for authentication, you must define the same method list for
authorization.
Command Authorization settings
Privilege Level The privilege level to which the command authorization definition
applies.
Prioritized Method List The method list to use when authorizing users with this privilege level.
Add button Opens the Command Authorization Dialog Box—Line Access,
page 60-60. From here you can configure a command authorization
definition.