| 13.5 |  | Command Authorization |
| 13.5.3 |  | (Method 2) local command authorization |

| A second way of controlling which commands users can execute is to configure command authorization using the local user database. After assigning commands to privilege levels with the privilege command, use the username command to define user accounts and their privilege levels in the local PIX Security Appliance user database. Create as many user accounts as are needed. After defining the user accounts, enable command authorization with the aaa authorization command. To enable a direct username and password prompt, enable authentication via the local user database by entering the aaa authentication enable console local command.

The local database can be used only for controlling access to the PIX Security Appliance, and not for controlling access through the PIX Security Appliance.

The Command Reference gives details on the username command and its syntax, as well as the aaa authentication enable console LOCAL command. The privilege command and the aaa authorization command were introduced in the previous sections.

| Lab Activity Lab Exercise: Configure SSH, Command Authorization, and Local User Authentication In this lab exercise, students will configure SSH, configure command authorization, and configure local user authentication.