Cisco IOS XR User Manual

SC-235
Cisco IOS XR System Security Configuration Guide
HC Cisco IOS XR Interface and Hardware Component
Configuration Guide
IC Cisco IOS XR IP Addresses and Services Configuration Guide
MCC Cisco IOS XR Multicast Configuration Guide
MNC Cisco IOS XR System Monitoring Configuration Guide
MPC Cisco IOS XR MPLS Configuration Guide
QC Cisco IOS XR Modular Quality of Service Configuration
Guide
RC Cisco IOS XR Routing Configuration Guide
SBC Cisco IOS XR Session Border Controller Configuration Guide
SC Cisco IOS XR System Security Configuration Guide
SMC Cisco IOS XR System Management Configuration Guide
INDEX
A
AAA (authentication, authorization, and accounting)
accounting method lists, configuring
SC-210
accounting services, enabling SC-217
authentication SC-175
authentication method lists, configuring SC-205
authorization, enabling SC-216
authorization method lists, configuring SC-207
configuration SC-174
database SC-173
interim accounting records, procedure SC-214
login parameters, configuring SC-220
per VRF (VPN routing and forwarding) SC-196
RADIUS server groups, configuring SC-201
remote configuration SC-174
router to RADIUS server communication,
configuring
SC-190
services, configuration (examples) SC-221
TACACS+ server, configuring SC-198
TACACS+ server groups, configuring SC-203
task-based authorization
task groups
SC-172
task IDs SC-178
task groups
configuration
SC-184
user and group attributes SC-170
user groups
configuring
SC-186
definition SC-171
inheritance SC-171
predefined SC-171
prerequisites SC-169
privilege level mapping SC-181
restrictions SC-169
users, configuring SC-188
XML schema SC-181
aaa accounting command SC-214
aaa accounting update command SC-214
accept-lifetime command SC-83
accept-tolerance command SC-78
accounting records, interim
aaa accounting command
SC-214
aaa accounting update command SC-214
procedure SC-214
algorithms
See IKE, algorithms
allow command
SC-230
antireplay window (IPSec)
checking crypto profile
SC-117
crypto ipsec profile command SC-117
crypto ipsec security-association replay disable
command
SC-116
crypto ipsec security-association replay window-size
command
SC-116
expanding and disabling globally procedure SC-116
overview SC-98

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.