Cisco CRS User Manual

Command History
ModificationRelease
This command was introduced.Release 2.0
Support was added to display all user names in global configuration
mode.
Release 3.3.0
Having cisco-support privileges as the only group was disallowed.Release 3.6.0
The command syntax descriptions, usage information, and examples
were corrected or enhanced.
Release 3.7.0
Usage Guidelines
A user is never allowed to have cisco-support privileges as the only group.Note
Use the username command to identify the user and enter username configuration mode. Password and user
group assignments can be made from either global configuration mode or username configuration submode.
Permissions (task IDs) are assigned by associating the user with one or more defined user groups.
From global configuration mode, you can display all the configured usernames. However, you cannot display
all the configured usernames in username configuration mode.
Each user is identified by a username that is unique across the administrative domain. Each user should be
made a member of at least one user group. Deleting a user group may orphan the users associated with that
group. The AAA server authenticates orphaned users, but most commands are not authorized.
The username command is associated with a particular user for local login authentication by default.
Alternatively, a user and password can be configured in the database of the RADIUS server for RADIUS
login authentication, or a user and password can be configured in the database of the TACACS+ server for
TACACS+ login authentication. For more information, see the description of the aaa authentication , on
page 13 command.
The predefined group root-system may be specified only by root-system users while administration is
configured.
To enable the local networking device to respond to remote Challenge Handshake Authentication Protocol
(CHAP) challenges, one username command entry must be the same as the hostname entry that has
already been assigned to the other networking device.
Note
Task ID
OperationsTask ID
read, writeaaa
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
120 OL-24740-01
Authentication, Authorization, and Accounting Commands
username

Cisco CRS Specifications

General

Operating System	Cisco IOS XR
Product Type	Core Router
Form Factor	Modular Chassis
Dimensions	Varies by chassis type
Weight	Varies by chassis type
Architecture	Distributed
Switch Fabric	Multi-stage
Interface Support	Ethernet, SONET/SDH, OTN
Interfaces/Ports	Varies by line card
Port Density	Varies by line card
Routing Protocol	BGP, IS-IS, OSPF, MPLS
Management	CLI, SNMP
Power Supply	Redundant, hot-swappable
Cooling	Redundant, Hot-swappable Fan Trays
Supported Protocols	IPv4, IPv6, MPLS
Management Interfaces	Ethernet, console
Security Features	ACLs