Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

server (TACACS+)

server (TACACS+)

To associate a particular TACACS+ server with a defined server group, use the server command in TACACS+ server-group configuration mode. To remove the associated server from the server group, use the no form of this command.

server {hostname ip-address}

no server {hostname ip-address}

Syntax Description

hostname

Character string used to name the server host.

 

ip-address

IP address of the server host.

 

 

 

Defaults

Command Modes

Command History

No default behavior or values

TACACS+ server-group configuration

Release

Modification

Release 2.0

This command was introduced on the Cisco CRS-1.

 

 

Release 3.0

No modification.

 

 

Release 3.2

This command was supported on the Cisco XR 12000 Series Router.

 

 

Release 3.3.0

No modification.

 

 

Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Use the server command to associate a particular TACACS+ server with a defined server group. The server need not be accessible during configuration. Later, you can reference the configured server group from the method lists used to configure authentication, authorization, and accounting (AAA).

Task ID

 

Task ID

Operations

 

 

 

aaa

read, write

 

 

 

 

 

 

 

 

 

Examples

 

The following example shows how to associate the TACACS+ server with the IP address 192.168.60.15

 

 

with the server group tac1:

RP/0/RP0/CPU0:router# configure

RP/0/RP0/CPU0:router(config)# aaa group server tacacs+ tac1

RP/0/RP0/CPU0:router(config-sg-tacacs+)# server 192.168.60.15

Cisco IOS XR System Security Command Reference

SR-54

Page 54
Image 54
Cisco Systems XR manual Server TACACS+, SR-54