Cisco IOS XR User Manual

Configuring AAA Services on Cisco IOS XR Software
How to Configure AAA Services
SC-209
Cisco IOS XR System Security Configuration Guide
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
aaa authorization {commands | exec | network}
{default |
list-name } {none | local | group
{tacacs+ | radius |
group-name}}
Example:
RP/0/RP0/CPU0:router(config)# aaa authorization
commands listname1 group tacacs+
Creates a series of authorization methods, or a method list.
• The commands keyword configures authorization for
all EXEC shell commands. Command authorization
applies to the EXEC mode commands issued by a user.
Command authorization attempts authorization for all
EXEC mode commands.
• The exec keyword configures authorization for an
interactive (EXEC) session.
• The network keyword configures authorization for
network services like PPP or IKE.
• The default keyword causes the listed authorization
methods that follow this keyword to be the default list
of methods for authorization.
• A list-name character string identifies the authorization
method list. The method list itself follows the method
list name. Method list types are entered in the preferred
sequence. The listed method list types can be any one
of the following:
– none—The network access server (NAS) does not
request authorization information. Authorization
always succeeds. No subsequent authorization
methods will be attempted. However, the task ID
authorization is always required and cannot be
disabled.
– local—Uses local database for authorization.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.