Cisco IOS XR

Configuring AAA Services on Cisco IOS XR Software
Configuration Examples for Configuring AAA Services
SC-221
Cisco IOS XR System Security Configuration Guide
Configuration Examples for Configuring AAA Services
This section provides the following configuration examples:
• Configuring AAA Services: Example, page SC-221
Configuring AAA Services: Example
The following examples show how to configure AAA services.
An authentication method list vty-authen is configured. This example specifies a method list that uses
the list of all configured TACACS+ servers for authentication. If that method fails, the local username
database method is used for authentication.
configure
aaa authentication login vty-authen group tacacs+ local
The default method list for PPP is configured to use local method.
aaa authentication ppp default local
A username user1 is created for login purposes, a secure login password is assigned, and user1 is made
a root-system user. Configure similar settings for username user2.
username user1
Step 3
timeout login response seconds
Example:
RP/0/RP0/CPU0:router(config-line)# timeout
login response 20
Sets the interval that the server waits for reply to a login.
• The seconds argument specifies the timeout interval (in
seconds) from 0 to 300. The default is 30 seconds.
• The example shows how to change the interval timer to
20 seconds.
Step 4
end
or
commit
Example:
RP/0/RP0/CPU0:router(config-line)# end
or
RP/0/RP0/CPU0:router(config-line)# commit
Saves configuration changes.
• When you issue the end command, the system prompts
you to commit changes:
Uncommitted changes found, commit them before
exiting(yes/no/cancel)?
[cancel]:
– Entering yes saves configuration changes to the
running configuration file, exits the configuration
session, and returns the router to EXEC mode.
– Entering no exits the configuration session and
returns the router to EXEC mode without
committing the configuration changes.
– Entering cancel leaves the router in the current
configuration session without exiting or
committing the configuration changes.
• Use the commit command to save the configuration
changes to the running configuration file and remain
within the configuration session.
Command or Action (continued) Purpose (continued)