Configuring authorization

See the following sections to configure authorization:

• Local authorization

  For local authorization, configure these tasks on each participating router:

  • Configuring profiles

  • Configuring users

• RADIUS authorization (only)

  For RADIUS authorization (without authentication), configure these tasks on each participating router:

  • Configuring RADIUS authorization

  • Configuring profiles

  For RADIUS authorization, VSAS must be configured on the RADIUS server. See Vendor-specific attributes (VSAS).

• RADIUS authorization

  For RADIUS authorization (with authentication), configure these tasks on each participating router:

  • Configuring RADIUS authorization

  For RADIUS authorization, VSAS must be configured on the RADIUS server. See Vendor-specific attributes (VSAS).

  • Configuring RADIUS authentication

  • Configuring profiles

• TACACS+ authorization (only)

  For TACACS+ authorization (without authentication), configure these tasks on each participating router:

  • Configuring TACACS+ authorization

• TACACS+ authorization

  For TACACS+ authorization (with authentication), configure these tasks on each participating router:

  • Enabling TACACS+ authentication

  • Configuring TACACS+ authorization