Cisco Systems XR manual Username, SR-97

Page 97

Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

username

username

To configure a new user with a username, establish a password, and grant permissions for the user, and to enter username configuration mode, use the username command in global configuration mode. To delete a user from the database, use the no form of this command.

username user-name[password {0 7} password secret {0 5} password group usergroup-name]

no username user-name[password {0 7} password secret {0 5} password group usergroup-name]

Syntax Description

user-name

Name of the user. The user-nameargument can be only one word. Spaces and

 

 

quotation marks are not allowed.

 

 

 

 

password

(Optional) Enables a password to be created for the named user.

 

 

 

 

0

(Optional) Specifies that an unencrypted (clear-text) password follows.

 

 

 

 

7

(Optional) Specifies that an encrypted password follows.

 

 

 

 

password

(Optional) Specifies the character-string password to be entered by the user to log in.

 

 

 

 

secret

(Optional) Enables a secure password to be created for the named user.

 

 

 

 

0

(Optional) Specifies that an unencrypted (clear-text) secret follows.

 

 

 

 

5

(Optional) Specifies an encrypted password follows.

 

 

 

 

group

(Optional) Enables a named user to be associated with a user group.

usergroup-name(Optional) Name of a user group as defined with the usergroup command.

Defaults

Command Modes

Command History

No usernames are defined in the system.

Global configuration

Release

Modification

Release 2.0

This command was introduced on the Cisco CRS-1.

 

 

Release 3.0

No modification.

 

 

Release 3.2

This command was supported on the Cisco XR 12000 Series Router.

 

 

Release 3.3.0

Support was added to display all user names in global configuration mode.

 

 

Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Use the username command to identify the user and enter username configuration mode. Password and user group assignments can be made from either global configuration mode or username configuration submode. Permissions (task IDs) are assigned by associating the user with one or more defined user groups.

Cisco IOS XR System Security Command Reference

SR-97

Image 97
Contents SR-1 SR-2 Aaa accountingAaa Read, write Creates a method list to be used for authorizationSR-3 SR-4 Aaa accounting system defaultCreates a method list for authorization Creates a method list for authenticationSR-5 SR-6 Aaa authenticationCreates a method list for accounting Radius, group named-group,local, or line optionsSR-7 SR-8 Command DescriptionNetwork Aaa authorizationLocal SR-9SR-10 SR-11 Which specifies that TACACS+ authorization is usedSR-12 Aaa default-taskgroupSR-13 Aaa group server radiusSR-14 Comprises three member serversSR-15 Aaa group server tacacs+SR-16 Accounting Aaa accounting commandSR-17 SR-18 List named listname2 on a line template named configureAuthorization command AuthorizationSR-19 SR-20 Listname4 on a line template named configureDeadtime minutes no deadtime Deadtime server-group configurationSR-21 SR-22 Related Commands DescriptionDescription string No description Description AAASR-23 SR-24 TaskgroupSR-25 GroupSR-26 Task ID ExamplesSR-27 Inherit taskgroupSR-28 Inherit usergroup usergroup-name Inherit usergroupSR-29 SR-30 Sales user groupAuthentication login command Login authenticationSR-31 SR-32 Password 0 7 password No password 0 7 password Password AAASR-33 SR-34 SR-35 Radius-server dead-criteria timeSR-36 SR-37 Radius-server dead-criteria triesSR-38 Dead-criteria timeRadius-server deadtime minutes No radius-server deadtime Radius-server deadtimeSR-39 SR-40 Radius-server host Timeout secondsRetransmit retries SR-41SR-42 SR-43 SR-44 Radius-server keySR-45 Specifies a Radius server hostSR-46 Radius-server retransmitRadius-server timeout seconds No radius-server timeout Radius-server timeoutSR-47 SR-48 Radius source-interfaceSR-49 Outgoing Radius packetsSecret 0 5 secret no secret 0 5 secret SecretSR-50 SR-51 SR-52 Server RadiusSR-53 SR-54 Server TACACS+SR-55 Groups different TACACS+ server hosts into distinct listsSR-56 Show aaaAaa usergroup operator SR-57SR-58 SR-59 Displays task IDs enabled for the currently logged-in userShow radius If no radius servers are configured, no output is displayedShow radius SR-60SR-61 Field DescriptionShow radius accounting Show radius accountingSR-62 SR-63 Show radius authenticationShow radius authentication Show radius authenticationSR-64 SR-65 Show radius accountingShow radius client Show radius clientSR-66 SR-67 SR-68 Show radius dead-criteriaSR-69 Show radius server-groups No default behavior or valuesShow radius server-groups SR-70SR-71 Field DescriptionShow tacacs Show tacacsSR-72 SR-73 Show tacacs server-groups Show tacacs server-groupsSR-74 SR-75 Show task supported Show task supportedSR-76 Ouni pkg-mgmt pos-dpt ppp SR-77SR-78 Show userUser all SR-79SR-80 SR-81 SR-82 Tacacs-server hostSR-83 Tacacs-server key key-nameno tacacs-server key Tacacs-server keySR-84 SR-85 Specifies a TACACS+ hostTacacs-server timeout seconds No tacacs-server timeout Tacacs-server timeoutSR-86 SR-87 Tacacs source-interfaceSR-88 Aaa group server radiusWrite TaskExecute DebugSR-90 SR-91 TaskgroupAdds a task ID to a task group Creates a task group description in task configuration modeSR-92 SR-93 Timeout login responseSR-94 Enables AAA authentication for loginsSR-95 UsergroupSR-96 Creates a description of a task group during configurationSR-97 UsernameCreates a login password for a user Defines a method list for authenticationAdds a user to a group SR-98SR-99 Users groupSR-100 Given operator privileges