Configuring AAA Services on Cisco IOS XR Software
How to Configure AAA Services
SC-192
Cisco IOS XR System Security Configuration Guide
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
radius-server host {
hostname
|
ip-address
}
[auth-port
port-number
] [acct-port
port-number
]
[timeout
seconds
] [retransmit
retries
] [key
string
]
Example:
RP/0/RP0/CPU0:router(config)# radius-server
host host1
Specifies the hostname or IP address of the remote RADIUS
server host.
• Use the auth-port port-number option to configure a
specific UDP port on this RADIUS server to be used
solely for authentication.
• Use the acct-port port-number option to configure a
specific UDP port on this RADIUS server to be used
solely for accounting.
• To configure the network access server to recognize
more than one host entry associated with a single IP
address, simply repeat this command as many times as
necessary, making sure that each UDP port number is
different. Set the timeout, retransmit, and encryption
key values to use with the specific RADIUS host.
• If no timeout is set, the global value is used; otherwise,
enter a value in the range 1 to 1000. If no retransmit
value is set, the global value is used; otherwise enter a
value in the range 1 to 100. If no key string is specified,
the global value is used.
Note The key is a text string that must match the
encryption key used on the RADIUS server. Always
configure the key as the last item in the
radius-server host command syntax because the
leading spaces are ignored, but spaces within and at
the end of the key are used. If you use spaces in your
key, do not enclose the key in quotation marks
unless the quotation marks themselves are part of
the key.
Step 3
radius-server retransmit
retries
Example:
RP/0/RP0/CPU0:router(config)# radius-server
retransmit 5
Specifies the number of times the Cisco IOS XR software
searches the list of RADIUS server hosts before giving up.
• In the example, the number of retransmission attempts
is set to 5.
Step 4
radius-server timeout
seconds
Example:
RP/0/RP0/CPU0:router(config)# radius-server
timeout 10
Sets the number of seconds a router waits for a server host
to reply before timing out.
• In the example, the interval timer is set to 10 seconds.
To Next Page
Loading...
Need help?
General
