Cisco IOS XR User Manual

Configuring AAA Services on Cisco IOS XR Software
How to Configure AAA Services
SC-203
Cisco IOS XR System Security Configuration Guide
What to Do Next
After configuring RADIUS server groups, define method lists by configuring authentication,
authorization, and accounting. (See the “Configuring AAA Method Lists” section.)
Configuring TACACS+ Server Groups
This task configures TACACS+ server groups.
The user can enter one or more server commands. The server command specifies the hostname or IP
address of an external TACACS+ server. Once configured, this server group can be referenced from the
AAA method lists (used while configuring authentication, authorization, or accounting). (See the
“Method Lists” section.)
Prerequisites
For configuration to succeed, the external server should be accessible at the time of configuration.
SUMMARY STEPS
1. configure
2. aaa group server tacacs+ group-name
3. server {host-name | ip-address}
4. Repeat Step 3 for every external server to be added to the server group named in Step 2.
5. end
or
commit
6. show tacacs server-groups
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
aaa group server tacacs+ group-name
Example:
RP/0/RP0/CPU0:router(config)# aaa group server
tacacs+ tacgroup1
Groups different server hosts into distinct lists and enters
the server group configuration mode.
Step 3
server { hostname | ip-address }
Example:
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server
192.168.100.0
Specifies the hostname or IP address of an external
TACAC S + s er ve r.
• When configured, this group can be referenced from the
AAA method lists (used while configuring
authentication, authorization, or accounting).

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.