Configuring AAA Services on Cisco IOS XR Software
Configuration Examples for Configuring AAA Services
SC-221
Cisco IOS XR System Security Configuration Guide
Configuration Examples for Configuring AAA Services
This section provides the following configuration examples:
• Configuring AAA Services: Example, page SC-221
Configuring AAA Services: Example
The following examples show how to configure AAA services.
An authentication method list vty-authen is configured. This example specifies a method list that uses
the list of all configured TACACS+ servers for authentication. If that method fails, the local username
database method is used for authentication.
configure
aaa authentication login vty-authen group tacacs+ local
The default method list for PPP is configured to use local method.
aaa authentication ppp default local
A username user1 is created for login purposes, a secure login password is assigned, and user1 is made
a root-system user. Configure similar settings for username user2.
username user1
Step 3
timeout login response
seconds
Example:
RP/0/RP0/CPU0:router(config-line)# timeout
login response 20
Sets the interval that the server waits for reply to a login.
• The seconds argument specifies the timeout interval (in
seconds) from 0 to 300. The default is 30 seconds.
• The example shows how to change the interval timer to
20 seconds.
Step 4
end
or
commit
Example:
RP/0/RP0/CPU0:router(config-line)# end
or
RP/0/RP0/CPU0:router(config-line)# commit
Saves configuration changes.
• When you issue the end command, the system prompts
you to commit changes:
Uncommitted changes found, commit them before
exiting(yes/no/cancel)?
[cancel]:
–
Entering yes saves configuration changes to the
running configuration file, exits the configuration
session, and returns the router to EXEC mode.
–
Entering no exits the configuration session and
returns the router to EXEC mode without
committing the configuration changes.
–
Entering cancel leaves the router in the current
configuration session without exiting or
committing the configuration changes.
• Use the commit command to save the configuration
changes to the running configuration file and remain
within the configuration session.
Command or Action (continued) Purpose (continued)
To Next Page
Loading...
Need help?
General
