Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
Command History | Release | Modification |
| Release 3.2 | This command was introduced on the Cisco |
|
| Cisco XR 12000 Series Router. |
|
|
|
| Release 3.3.0 | No modification. |
|
|
|
Usage Guidelines |
| To use this command, you must be in a user group associated with a task group that includes the proper | ||
|
| task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on | ||
|
| Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide. | ||
|
| You can use multiple | ||
|
| Cisco IOS XR software searches for hosts in the order in which you specify them. | ||
|
| If no | ||
|
|
|
|
|
Task ID. |
| Task ID | Operations |
|
|
|
|
|
|
|
| aaa | read, write | |
|
|
|
| |
|
|
|
|
|
Examples |
| The following example shows how to establish host1 as the RADIUS server and use default ports for | ||
|
| both accounting and authentication: | ||
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)#
The following example shows how to establish port 1612 as the destination port for authentication requests and port 1616 as the destination port for accounting requests on the RADIUS host named host1:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)#
Because entering a line resets all the port numbers, you must specify a host and configure accounting and authentication ports on a single line.
The following example shows how to establish the host with IP address 172.29.39.46 as the RADIUS server, use ports 1612 and 1616 as the authorization and accounting ports, set the timeout value to 6, set the retransmit value to 5, and set “rad123” as the encryption key, matching the key on the RADIUS server:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)#
To use separate servers for accounting and authentication, use the zero port value as appropriate.
The following example shows how to establish that RADIUS server host1 be used for accounting but not for authentication, and specify that RADIUS server host2 be used for authentication but not for accounting:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)#
RP/0/RP0/CPU0:router(config)#
Cisco IOS XR System Security Command Reference
