Configuring Authorization
Example 5-14 shows how to configure basic command authorization using a
TACACS+ security server. In this example, the user must be authorized to
use the EXEC shell, and access to commands at privilege levels 1 and 15
must also be authorized. Authorization is performed against the TACACS+
server if it is available, and against the local username/password database if
it is unavailable.
Example 5-14 Configuring AAA Authorization
R2(config)#aaa new-model
R2(config)#aaa authorization exec default group tacacs+ local
R2(config)#aaa authorization commands 1 default group tacacs+
local
R2(config)#aaa authorization commands 15 default group tacacs+
local