AAA Authorization help

jasonbailey80 — Sun, 10 Mar 2019 21:59:38 GMT

I have configured authentication for the outside users to connect to my servers using the following sample acl

access-list 110 permit tcp any host 10.10.10.3 eq http

access-list 110 permit tcp any host 10.10.10.4 eq http

access-list 110 permit tcp any host 10.10.10.5 eq http

aaa authentication match 110 outside TACACS+

Now for authorizing them do i have to create another set of acls or can i just use the existing acls and write

aaa authorization match 110 outside TACACS+

Is there anything else i should do on the AAA-Server for authorization?

Thanks

Jason

Re: AAA Authorization help

Vivek Santuka — Mon, 19 Feb 2007 17:04:15 GMT

Hi Jason,

You can use the same ACL for authorization. You will not have to do anything on ACS unless you need to push ACLs for the user.

Regards,

Vivek