Implementing Cisco AAA - authorization
This helps to limit the services available to a user. Once you enable authorization, the network servers use the information taken from the user's profile. The user's profile can be configured using a local database or external servers. Depending on the configuration of a user's profile, the user is allowed or denied access to a particular resource.
Prerequisites for authorization
The following are the steps to prepare the router for authorization:
- Enable the AAA feature on the network access server
- Complete the AAA authentication procedure since authorization is configured after authentication
- Define the operational characteristics of RADIUS and TACACS+ if any of them are used for authorization
- Finally, define the rights associated to the users with the help of their usernames
Configuring method lists for authorization
A method list is the way or a process that defines the sequence followed in authorization. It is a list of steps that is queried and executed...