We will define an authorization rule that tells the router that after a user authentication is successful, that user will need to be authorized. This authorization rule will then be referenced under an IKEv2 profile that will be configured later in this guide.

ISR-LAB(config)#aaa authorization network authZ-list local

The above command means that an authorization list named authZ-list is used for user authorization. The 1st method within the list says local which means a local authorization profile exists on the router. This authorization profile is to be configured and is going to be our next section.