Controlling Access Point Access with TACACS+
To specify RADIUS authorization for privileged EXEC access and network services, follow these steps,
beginning in privileged EXEC mode.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
DETAILED STEPS
Command
Step 1
configure terminal
Step 2
aaa authorization network radius
Step 3
aaa authorization exec radius
Step 4
end
Step 5
show running-config
Step 6
copy running-config startup-config
To disable authorization, use the no aaa authorization {network | exec} method1 command in global
configuration mode.
Displaying the RADIUS Configuration
To display the RADIUS configuration, use the show running-config command in privileged EXEC
mode.
Controlling Access Point Access with TACACS+
This section describes how to control administrator access to the wireless device using Terminal Access
Controller Access Control System Plus (TACACS+). For complete instructions on configuring the
wireless device to support TACACS+, see the
Cisco IOS Software Configuration Guide for Cisco Aironet Access
TACACS+ provides detailed accounting information and flexible administrative control over
authentication and authorization processes. TACACS+ is facilitated through AAA and can be enabled
only through AAA commands.
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
310
configure terminal
aaa authorization network radius
aaa authorization exec radius
end
show running-config
copy running-config startup-config
Purpose
Enters global configuration mode.
Configures the wireless device for user RADIUS authorization for all
network-related service requests.
Configures the wireless device for user RADIUS authorization to
determine whether the user has privileged EXEC access.
The exec keyword might return user profile information (such as
autocommand information).
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.
Chapter
"Configuring Radius and TACACS+ Servers"
Points.
Administering the Wireless Device
chapter in