cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
866
Views
6
Helpful
6
Replies

authorization commands do not show under line vty

rezaalikhani
Level 3
Level 3

This is my aaa configuration:

!

aaa authentication login default group ISE-TACACS local
aaa authorization config-commands
aaa authorization exec default group ISE-TACACS local
aaa authorization commands 0 default group ISE-TACACS local
aaa authorization commands 1 default group ISE-TACACS local
aaa authorization commands 15 default group ISE-TACACS local
aaa accounting exec default start-stop group ISE-TACACS
aaa accounting commands 0 default start-stop group ISE-TACACS
aaa accounting commands 1 default start-stop group ISE-TACACS
aaa accounting commands 15 default start-stop group ISE-TACACS
aaa accounting connection default
aaa session-id common

!

Now I configure the following commands under the line vty 0 15:

!

login authentication default
authorization commands 0 default
authorization commands 1 default
authorization commands 15 default
authorization exec default

!

Now I want to verify the configuration under the line vtys:

1.png

As you can see, nothing appears. Is this normal?

Thanks

 

 

 

1 Accepted Solution

Accepted Solutions

@rezaalikhani that is normal for the default method list you are using.

If you create a custom method list and reference that under the VTY lines, that will be displayed.

View solution in original post

6 Replies 6

@rezaalikhani that is normal for the default method list you are using.

If you create a custom method list and reference that under the VTY lines, that will be displayed.

Thanks for your reply;

So after configuring aaa commands using "default" method list, it does not require to apply them under VTY lines. Correct?

I think using the command "show run all" will show you the default values that you won't see when you use the command "show run".

Thanks for your reply;

Unfortunately, after applying the aaa commands under line vty, executing "show run all" does not show the applied commands! 

@rezaalikhani I double checked myself, "show run all" does not confirm the default method list is in use - when it is used. If you define a custom method list, this is displayed under the VTY lines when you run "show run all"