7.6.1.0 - Force10 Networks

To delete a TACACS+ server host, use the no tacacs-server host {hostname | ip-address} command.
freebsd2# telnet 2200:2200:2200:2200:2200::2202
Trying 2200:2200:2200:2200:2200::2202...
Connected to 2200:2200:2200:2200:2200::2202.
Escape character is '^]'.
Login: admin
Password:
Force10#
Force10#
!-The prompt is returned as the connection is authenticated.
Command Authorization
The AAA command authorization feature configures FTOS to send each configuration command to a
TACACS server for authorization before it is added to the running configuration.
By default, the command AAA authorization commands configures the system to check both EXEC level
and CONFIGURATION level commands. Use the command no aaa authorization config-commands to
enable only EXEC-level command checking.
If rejected by the AAA server, the command is not added ot the running configuration, and messages
similar to Message 4 are displayed.
Message 4 Configuration Command Rejection
04:07:48: %RPM0-P:CP %SEC-3-SEC_AUTHORIZATION_FAIL: Authorization failure Command
authorization failed for user (denyall) on vty0 ( 10.11.9.209 )
VTY Line and Access-Class Configuration
The Force10 Operating System provides several ways to configure access classes for VTY lines,
including:
• VTY Line Local Authentication and Authorization on page 124
• VTY Line Remote Authentication and Authorization on page 125
VTY Line Local Authentication and Authorization
FTOS retrieves the access class from the local database. To use this feature:
1. Create a username
2. Enter a password
3. Assign an access class
4. Enter a privilege level
124 Security