authorization

Syntax

authorization { exec | commands level } authorListName

no authorization {exec | commands level }

Release Information

Command introduced before JunosE Release 7.1.0.

Description

Enables AAA authorization for a specified vty line or group of vty lines. Associates the authorization list with the specified line. If the list does not exist or is empty, authorization always succeeds. For a command to be authorized, its level must match exactly with the level of one of the configured lists. The no version disables authorization.

Note: After you enable the aaa authorization command and define a named authorization method list (or use the default method list) for a particular type of authorization, you must apply the defined list to the appropriate lines for authorization to take place.

Options

• exec—Applies this authorization to CLI access in general
• commands—Applies this authorization to user commands of the specified privilege level
• level—Privilege level; a number in the range 0–15
• authorListName—Name of an authorization method list of up to 32 characters; if no methods list is specified, the default is used

Mode

Line Configuration