Configuring AAA Services on Cisco IOS XR Software
How to Configure AAA Services
SC-190
Cisco IOS XR System Security Configuration Guide
What to Do Next
After completing configuration of a full set of users, configure router to use the RADIUS server
communication or TACACS+ servers (See the “Configuring Router to RADIUS Server Communication”
or “Configuring a TACACS+ Server” section.)
Configuring Router to RADIUS Server Communication
This task configures router to RADIUS server communication.
The RADIUS host is normally a multiuser system running RADIUS server software from Cisco
(CiscoSecure ACS), Livingston, Merit, Microsoft, or another software provider. Configuring router to
RADIUS server communication can have several components:
• Hostname or IP address
• Authentication destination port
• Accounting destination port
• Retransmission value
• Timeout period
• Key string
RADIUS security servers are identified on the basis of their hostname or IP address, hostname and
specific User Datagram Protocol (UDP) port numbers, or IP address and specific UDP port numbers. The
combination of the IP address and UDP port numbers creates a unique identifier, allowing different ports
to be individually defined as RADIUS hosts providing a specific AAA service. In other words, this
Step 5
Repeat Step 4 for each user group to be associated with
the user specified in Step 2.
—
Step 6
end
or
commit
Example:
RP/0/RP0/CPU0:router(config-un)# end
or
RP/0/RP0/CPU0:router(config-un)# commit
Saves configuration changes.
• When you issue the end command, the system prompts
you to commit changes:
Uncommitted changes found, commit them before
exiting(yes/no/cancel)?
[cancel]:
–
Entering yes saves configuration changes to the
running configuration file, exits the configuration
session, and returns the router to EXEC mode.
–
Entering no exits the configuration session and
returns the router to EXEC mode without
committing the configuration changes.
–
Entering cancel leaves the router in the current
configuration session without exiting or
committing the configuration changes.
• Use the commit command to save the configuration
changes to the running configuration file and remain
within the configuration session.
Command or Action Purpose
To Next Page
Loading...
Need help?
General
