Configuring AAA Services on Cisco IOS XR Software
How to Configure AAA Services
SC-20
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
6. Repeat Step 5 for each task ID to be associated with the task group named in Step 2.
7. end
or
commit
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
taskgroup taskgroup-name
Example:
RP/0/RP0/CPU0:router(config)# taskgroup beta
Creates a name for a particular task group and enters task
group configuration submode.
• Specific task groups can be removed from the system
by specifying the no form of the taskgroup command.
Step 3
description string
Example:
RP/0/RP0/CPU0:router(config-tg)# description
this is a sample task group description
(Optional) Creates a description of the task group named in
Step 2.
Step 4
inherit taskgroup taskgroup-name
Example:
RP/0/RP0/CPU0:router(config-tg)# inherit
taskgroup sysadmin
(Optional) Derives permissions from another task group and
assigns them to the task group named in
Step 2.
• Circular references are detected and rejected.
• To explicitly define permissions for the task group
named in
Step 2, omit Step 4 and go to Step 5.
Step 5
task {read | write | execute | debug}
taskid-name
Example:
RP/0/RP0/CPU0:router(config-tg)# task read bgp
Specifies a task ID to be associated with the task group
named in
Step 2.
• Assigns read permission for any CLI or API
invocations associated with that task ID and performed
by a member of the task group.
• Specific task IDs can be removed from a task group by
specifying the no prefix for the task command.