Cisco Nexus aaa authorization 'commands' vs 'config-commands'
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-05-2021 06:33 AM
hi,
i'm trying to configure AAA on a nexus switch. could someone advise the difference between.
aaa authorization commands
vs
aaa authorization config-commands
my google search only points to cisco config guides. i would like to know if one is preferred over the other? or should i include both?
also please see my nexus AAA template below. do i need to add/remove lines here?
aaa authentication login default group TAC-GRP local
aaa authentication login console group TAC-GRP local
aaa authorization config-commands default group TAC-GRP local
aaa authorization config-commands console group TAC-GRP local
aaa authorization commands default group TAC-GRP local
aaa authorization commands console group TAC-GRP local
aaa accounting default group TAC-GRP local
- Labels:
-
Other Switches
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-05-2021 06:40 AM
Configures authorization parameters.
Use the commands keyword to authorize EXEC mode commandes.
Use the config-commands keyword to authorize configuration mode commands.
Use the group, local, or none keywords to identify the authorization method.
example :
