remote-authorize

Function

The remote-authorize command specifies the user authorization information to be delivered to an authentication access device.

The undo remote-authorize command restores the default user authorization information to be delivered to an authentication access device.

By default, all user authorization information cannot be delivered to authentication access devices.

Format

remote-authorize { acl | car | ucl-group } ^*

undo remote-authorize

Parameters

Parameter	Description	Value
acl	Delivers ACL authorization information.	-
car	Delivers CAR authorization information.	-
ucl-group	Delivers UCL group authorization information. NOTE: When you authorize the ACL or UCL group, configure the corresponding ACL or UCL group on authentication access devices to ensure that the authorization information takes effect on the authentication access devices.	-

Views

Service scheme view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

To enable an authentication access device to implement specified user access policies, you can run this command to specify user authorization information to be delivered to the authentication access device. By default, no authorization information is delivered to the authentication access device.

Precautions

This command is supported only on authentication access devices.

This command takes effect for all user authorization information, including local authorization, remote authorization, and RADIUS dynamic authorization information.

In SVF centralized configuration mode, authentication access devices do not support ACL-based authorization or UCL groups.

Example

# Deliver only ACL authorization information to the authentication access device.

<HUAWEI> system-view
[HUAWEI] aaa
[HUAWEI-aaa] service-scheme huawei
[HUAWEI-aaa-service-huawei] remote-authorize acl