Comments on ipSpace.net: There is no local command authorization

Hi Ivan/all I've tried the example above usin...

2010-04-24T20:49:41.000+02:00

Hi Ivan/all

I've tried the example above using the following commands
R1
"aaa authorization commands 1 default local".
Now when I telneted from R2 to R1 which has the aaa commands and issue a privilege level 1 commands like "show clns, show aliases, show clock" it does not permit me to do so, instead it says
"% Authorization failed."

Do you think that it is the other way around? Instead of (always succeeds), it always fails!? Since local database like router has no way to authorize each individual commands (like tacacs+ do) or are there any?

as a comment for this , local autherization is use...

2009-07-27T16:33:10.000+02:00

as a comment for this , local autherization is used by if-authenticated feature to grant autherization for all commands if TACACS isn't reachbale after authentication

@Tassos: It looks that way to me.

2009-06-29T11:01:17.784+02:00

@Tassos: It looks that way to me.

So Ivan, there is no actual difference (besides th...

2009-06-29T10:56:44.013+02:00

So Ivan, there is no actual difference (besides the local auth function call) between
"aaa authorization commands 1 default group TACACS-AAA-GROUP none" and
"aaa authorization commands 1 default group TACACS-AAA-GROUP local"?