Cisco CRS User Manual

Command History
ModificationRelease
This command was introduced.Release 2.0
The method-list argument was added to specify either group tacacs+
, group radius, group named-group, local, or line options.
Release 3.3.0
Usage Guidelines
Use the aaa authentication command to create a series of authentication methods, or method list. You can
specify up to four methods in the method list. A method list is a named list describing the authentication
methods (such as TACACS+ or RADIUS) in sequence. The subsequent methods of authentication are used
only if the initial method is not available, not if it fails.
The default method list is applied for all interfaces for authentication, except when a different named method
list is explicitly specified—in which case the explicitly specified method list overrides the default list.
For console and vty access, if no authentication is configured, a default of local method is applied.
Note
•
The group tacacs+, group radius, and group group-name forms of this command refer to a set of
previously defined TACACS+ or RADIUS servers.
•
Use the tacacs-server host or radius-server host command to configure the host servers.
•
Use the aaa group server tacacs+ or aaa group server radius command to create a named subset
of servers.
•
The login keyword, remote keyword, local option, and group option are available only in
administration configuration mode.
Task ID
OperationsTask ID
read, writeaaa
Examples
The following example shows how to specify the default method list for authentication, and also enable
authentication for console in global configuration mode:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# aaa authentication login default group tacacs+
The following example shows how to specify the remote method list for authentication, and also enable
authentication for console in administration configuration mode:
RP/0/RP0/CPU0:router# admin
RP/0/RP0/CPU0:router (admin)# configure
RP/0/RP0/CPU0:router(admin-config)# aaa authentication login remote local group tacacs+
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
14 OL-24740-01
Authentication, Authorization, and Accounting Commands
aaa authentication

Cisco CRS Specifications

General

Operating System	Cisco IOS XR
Product Type	Core Router
Form Factor	Modular Chassis
Dimensions	Varies by chassis type
Weight	Varies by chassis type
Architecture	Distributed
Switch Fabric	Multi-stage
Interface Support	Ethernet, SONET/SDH, OTN
Interfaces/Ports	Varies by line card
Port Density	Varies by line card
Routing Protocol	BGP, IS-IS, OSPF, MPLS
Management	CLI, SNMP
Power Supply	Redundant, hot-swappable
Cooling	Redundant, Hot-swappable Fan Trays
Supported Protocols	IPv4, IPv6, MPLS
Management Interfaces	Ethernet, console
Security Features	ACLs