ccna 200-301: lab assessments preparation

ccna 200-301: lab assessments preparation.To configure command authorization, use the aaa authorization {network | exec | commands level} {default | /ist-name} method 1... [method4] command. Service type You can specify the type of command or service.commands leve/ for exec (shell) commands.exec for starting an exec (shell).network for network services (PPP, SLIP, and ARAP).When AAA authorization is not enabled, all users have full access. When authentication is turned on, the default changes to disallow access. This means that an administrator must create a user with full access before enabling authorization. If this is not done, once the aaaauthorization command is entered, the administrator is immediately locked out of the system' The only way to recover in this case is to reboot the router. If this router is used in a production environment, a reboot may not be acceptable. Therefore, it should be ensured that at least one user always has full privileges.3.5.1.3 AAA Authorization Basis Using CCPTo configure the router to use the Cisco Security ACS server for authorization, you need to create a user-defined list of authorization methods or edit the default list of authorization methods. The default authorization method list is automatically applied to all interfaces except those to which the user-defined authorization method list is explicitly applied. The user-defined authorization method list will override the default authorization method list. You can use CCP to configure the default authorization method list for character mode (exec) access.Step 1 On the CCP main page, select Configure>Router>AAA>AuthorizationPolicies>EXECCommandMode.Step 2 In the ExecAuthorization panel, select the default list and click Add.