Cisco® Secure Internet Security Solutions

AAA Authorization Setup

Whereas authentication is concerned with ensuring that the device or end user is who it claims to be, authorization is concerned with allowing and disallowing authenticated users access to certain areas and programs on the network.

The command for enabling authorization follows:

						aaa authorization
						service-type {default | list-name}
    method1 [method2] [method3] [method4]

With this command, service-type must be one of the service types listed in Table 10-4.

Table 10-4. AAA Authorization Service Types

Service Type	Description
commands {level}	Checks authorization for any EXEC command at the optionally specified level
exec	Checks authorization to run an EXEC shell
network	Checks authorization for network activities
reverse-access ...