Configuring AAA Services on Cisco IOS XR Software
How to Configure AAA Services
SC-191
Cisco IOS XR System Security Configuration Guide
unique identifier enables RADIUS requests to be sent to multiple UDP ports on a server at the same IP
address. If two different host entries on the same RADIUS server are configured for the same
service—for example, accounting—the second host entry configured acts as an automatic switchover
backup to the first one. Using this example, if the first host entry fails to provide accounting services,
the network access server tries the second host entry configured on the same device for accounting
services. (The RADIUS host entries are tried in the order they are configured.)
A RADIUS server and a Cisco router use a shared secret text string to encrypt passwords and exchange
responses.To configure RADIUS to use the AAA security commands, you must specify the host running
the RADIUS server daemon and a secret text (key) string that it shares with the router.
The timeout, retransmission, and encryption key values are configurable globally for all RADIUS
servers, on a per-server basis, or in some combination of global and per-server settings. To apply these
settings globally to all RADIUS servers communicating with the router, use the three unique global
commands: radius-server timeout, radius-server retransmit, and radius-server key. To apply these
values on a specific RADIUS server, use the radius-server host command.
Note You can configure both global and per-server timeout, retransmission, and key value commands
simultaneously on the same Cisco network access server. If both global and per-server functions are
configured on a router, the per-server timer, retransmission, and key value commands override global
timer, retransmission, and key value commands.
SUMMARY STEPS
1. configure
2. radius-server host {hostname | ip-address} [auth-port port-number] [acct-port port-number]
[timeout seconds] [retransmit retries] [key string]
3. radius-server retransmit retries
4. radius-server timeout seconds
5. radius-server key {0 clear-text-key | 7 encrypted-key | clear-text-key}
6. radius source-interface type instance [vrf vrf-id]
7. Repeat Step 2 through Step 6 for each external server to be configured.
8. end
or
commit
9. show radius
To Next Page
Loading...
Need help?
General
