Cisco CRS-1 - Carrier Routing System Router Configuration Guide

Configuring AAA Services on Cisco IOS XR Software
How to Configure AAA Services
SC-34
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
7. Repeat Step 2. through Step 5. for each external server to be configured.
8. end
or
commit
9. show tacacs
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
tacacs-server host host-name port port-number
Example:
RP/0/RP0/CPU0:router(config)# tacacs-server
host 209.165.200.226 port 51
RP/0/RP0/CPU0:router(config-tacacs-host)#
Specifies a TACACS+ host server and optionally specifies a
server port number.
• This option overrides the default, port 49. Valid port
numbers range from 1 to 65535.
Step 3
tacacs-server host host-name timeout seconds
Example:
RP/0/RP0/CPU0:router(config-tacacs-host)# tacac
s-server host 209.165.200.226 timeout 30
RP/0/RP0/CPU0:router(config)#
Specifies a TACACS+ host server and optionally specifies a
timeout value that sets the length of time the AAA server
will wait to receive a response from the TACACS+ server.
• This option overrides the global timeout value set with
the tacacs-server timeout command for this server
only. The timeout value is expressed as an integer in
terms of timeout interval seconds. The valid timeout
range is from 1 to 1000 seconds.
Step 4
tacacs-server host host-name key [0 | 7]
auth-key
Example:
RP/0/RP0/CPU0:router(config)# tacacs-server
host 209.165.200.226 key 0 a_secret
Specifies a TACACS+ host server and optionally specifies
an authentication and encryption key shared between the
AAA server and the TACACS+ server.
• The TACACS+ packets are encrypted using this key.
This key must match the key used by TACACS+
daemon. Specifying this key overrides the global key
set by the tacacs-server key command for this server
only.
• (Optional) Entering 0 indicates that an unencrypted
(clear-text) key will follow.
• (Optional) Entering 7 indicates that an encrypted key
will follow.
• The auth-key argument specifies the encrypted or
unencrypted key to be shared between the AAA server
and the TACACS+ server.

Cisco CRS-1 - Carrier Routing System Router Specifications

General

Brand	Cisco
Model	CRS-1 - Carrier Routing System Router
Category	Network Router
Language	English