topic No, the aaa authorization in Network Access Control

authorization config-commands - doubts

Guilherme Gianotto Bratfisch — Mon, 11 Mar 2019 05:01:46 GMT

Hello Everyone,

So, for AAA Authorization,

When I issue : aaa authorization commands 15 default local. -> It will authorize every command on the exec for lvl 15.

The command above will overlap the: aaa authorization config-commands. ?!

I should use : aaa authorization config-commands. Just when i'm trying to authorize configuration commands ?!

No, the aaa authorization

nspasov — Wed, 17 Sep 2014 00:57:46 GMT

No, the aaa authorization config-commands is a must for the aaa authorization commands 15 default local to work. If the config-commands is missing from your config then no authorization will happen for level 15 commands. Take a look at this post:

https://supportforums.cisco.com/discussion/11409121/command-confusion-aaa-authorization-config-commands

Thank you for rating helpful posts!