AAA Method Commands
16-102 Configuring Security
client‐ConfiguresthedefaultAAAmethod(plugin)foreachclientservice.Referto
page16106forthecommanddefinition.
enable - EnablesthecurrentAAAserverforRADIUS.Refertopage16106forthe
commanddefinition.
group - Specifiesthenameofanexistinggroup.Refertopage16107forthecommand
definition.
hash enable - EnablesthehashalgorithmusedforRADIUS.Refertopage16108forthe
commanddefinition.
key - SetstheauthenticationandencryptionkeyusedbetweentheXSRandtheserver
daemonrunningonaRADIUSserver.Refertopage16108forthecommanddefinition.
qtimeout - Specifiesthequeuetimeout.Refertopage16109forthecommanddefinition.
retransmit - SpecifiesthenumberofAAARADIUSserverrequestssenttoaserver.Refer
topage16109forthecommanddefinition.
timeout - SetstheintervaltheXSRwaitsfortheAAARADIUSservertoreplybefore
retransmitting.Refertopage16110forthecommanddefinition.
Syntax
aaa method {local | radius | pki} method-name [default]
Syntax of the “no�� Form
UsethenoformtodeletetheAAAmethodandrestorethedefault:
no aaa method {local | radius | pki} method-name
Default
Ifthedefaultisnotspecified,thelocalmethodisthedefaultforAAAserviceandsubsystems
lackingtheirowndefault.
Mode
Globalconfiguration:XSR(config)#
Next Mode
AAAMethodconfiguration:XSR(aaa-method-xx)#
Example
ThisexamplesetsRADIUSmethodsbrasthedefaultforAAAservice:
XSR(config)#aaa method radius sbr default
local LocalAAAmethod.
radius RADIUSmethod.YoumustsetaRADIUSservertype.
pki PKImethod.
method-name DesignationoftheAAAmethod(plugin).
default Ifthekeywordisset,themethodisDEFAULT,unlessoverriddenona
perservicebasisbytheclientsubcommand.