Cisco PIX 525 Especificaciones descargar pdf (Pagina 498)

100

101

30-14

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 30 Managing System Access

Authenticating and Authorizing System Administrators

–

show pager

–

clear pager

–

quit

–

show version

Enabling TACACS+ Command Authorization

Before you enable TACACS+ command authorization, be sure that you are logged into the security

appliance as a user that is defined on the TACACS+ server, and that you have the necessary command

authorization to continue configuring the security appliance. For example, you should log in as an admin

user with all commands authorized. Otherwise, you could become unintentionally locked out.

To perform command authorization using a TACACS+ server, enter the following command:

hostname(config)# aaa authorization command

tacacs+_server_group

[LOCAL]

You can configure the security appliance to use the local database as a fallback method if the TACACS+

server is unavailable. To enable fallback, specify the server group name followed by LOCAL (LOCAL

is case sensitive). We recommend that you use the same username and password in the local database as

the TACACS+ server because the security appliance prompt does not give any indication which method

is being used. Be sure to configure users in the local database (see the “Configuring Command

Authorization” section on page 30-7) and command privilege levels (see the “Configuring Local

Command Authorization” section on page 30-7).

Viewing the Current Logged-In User

To view the current logged-in user, enter the following command:

hostname# show curpriv

See the following sample show curpriv command output. A description of each field follows.

hostname# show curpriv

Username : admin

Current privilege level : 15

Current Mode/s : P_PRIV

Table 30-1 describes the show curpriv command output.

Table 30-1 show curpriv Display Description

Field Description

Username Username. If you are logged in as the default user, the name is enable_1 (user

EXEC) or enable_15 (privileged EXEC).

Current privilege level Level from 0 to 15. Unless you configure local command authorization and

assign commands to intermediate privilege levels, levels 0 and 15 are the only

levels that are used.

Current Mode/s Shows the access modes:

• P_UNPR—User EXEC mode (levels 0 and 1)

• P_PRIV—Privileged EXEC mode (levels 2 to 15)

• P_CONF—Configuration mode

1 2 ... 493 494 495 496 497 498 499 500 501 502 503 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 498

Comentarios a estos manuales