Cisco CRS User Manual

aaa authentication
To create a method list for authentication, use the aaa authentication command. To disable this authentication
method, use the no form of this command.
aaa authentication {login| ppp} {default| list-name| remote} method-list
no aaa authentication {login| ppp} {default| list-name| remote} method-list
Syntax Description
Sets authentication for login.login
Sets authentication for Point-to-Point Protocol.ppp
Uses the listed authentication methods that follow this keyword as the default list of
methods for authentication.
default
Sets the authentication list for the subscriber.subscriber
Character string used to name the authentication method list.
list-name
Uses the listed authentication methods that follow this keyword as the default list of
methods for administrative authentication on a remote non-owner secure domain router.
The remote keyword is used only with the login keyword and not with the ppp keyword.
The remote keyword is available only on the administration
plane.
Note
remote
Method used to enable AAA system accounting. The value is one of the following options:
• group tacacs+—Specifies a method list that uses the list of all configured
TACACS+ servers for authentication.
• group radius—Specifies a method list that uses the list of all configured RADIUS
servers for authentication.
• group named-group —Specifies a method list that uses a named subset of
TACACS+ or RADIUS servers for authentication, as defined by the aaa group
server tacacs+ or aaa group server radius command.
• local—Specifies a method list that uses the local username database method for
authentication. AAA method rollover happens beyond the local method if username
is not defined in the local group.
• line—Specifies a method list that uses the line password for authentication.
method-list
Command Default
Default behavior applies the local authentication on all ports.
Command Modes
Global configuration or Administration Configuration
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 13
Authentication, Authorization, and Accounting Commands
aaa authentication

Cisco CRS Specifications

General

Operating System	Cisco IOS XR
Product Type	Core Router
Form Factor	Modular Chassis
Dimensions	Varies by chassis type
Weight	Varies by chassis type
Architecture	Distributed
Switch Fabric	Multi-stage
Interface Support	Ethernet, SONET/SDH, OTN
Interfaces/Ports	Varies by line card
Port Density	Varies by line card
Routing Protocol	BGP, IS-IS, OSPF, MPLS
Management	CLI, SNMP
Power Supply	Redundant, hot-swappable
Cooling	Redundant, Hot-swappable Fan Trays
Supported Protocols	IPv4, IPv6, MPLS
Management Interfaces	Ethernet, console
Security Features	ACLs