Aaa profile, Aaa profile -12 – Kentrox AI232 User Manual

Page 184

Advertising
background image

AI232 Version 9.6x User’s Guide

AI232 Commands: aaa profile

8-12

aaa profile

Description

This command associates a custom profile with a privilege level or range of privilege
levels. The following rules apply:

z

TACACS+ privilege levels range from 0 to 15.

z

Custom profiles can be associated with privilege levels 2 through 14.

z

Privilege levels 2 through 14 default to the management system profile.

z

Privilege levels 0, 1, and 15 are reserved for the Status, Management, and
Supervisor system profiles (respectively).

For information on creating custom profiles, refer to command

profile on page 8-78

.

Privilege levels are used only if the authorization method is set to

priv-lvl

. The only

exception to this occurs under all of the following conditions:

1. The authentication server returns a privilege level.

2. The authorization server cannot be reached.

3. The authorization is set to per-command and fallback is enabled.

For information on configuring the authorization method, refer to command

aaa

author on page 8-8

.

Command Type

shell

Formats

aaa profile {

priv_range

} {

profile_name

| default }

Parameters

Command Defaults

No associations configured

priv_range

Defines the range of privilege levels that will be associated with
the profile. Individual values are separated by commas (,) and
hyphens (-). For example,

1,4-6

specifies privilege levels 1, 4, 5,

and 6.

profile_name

Specifies the name of an existing profile.

default

Removes the association between a range of privilege levels and
a profile.

Advertising