Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 43

Configuring AAA Services on Cisco IOS XR Software
Command or Action
Step 4
Repeat Step 3 for every external server to be added to
the server group named in
Step 5
server-private {hostname | ip-address}
[auth-port port-number] [acct-port port-number]
[timeout seconds] [retransmit retries] [key
string]
Example:
RP/0/RP0/CPU0:router(config-sg-radius)# server-
private 10.10.130.2 auth-port 1600 acct-port
1666 key code
Step 6
deadtime minutes
Example:
RP/0/RP0/CPU0:router(config-sg-radius)#
deadtime 1
Step 7
end
or
commit
Example:
RP/0/RP0/CPU0:router(config-sg-radius)# end
or
RP/0/RP0/CPU0:router(config-sg-radius)# commit
Step 8
show radius server-groups [group-name [detail]]
Example:
RP/0/RP0/CPU0:router# show radius server-groups
OL-20382-01
Step 2.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
Purpose
—
Configures the IP address of the private RADIUS server for
the group server.
Note If private server parameters are not specified, global
configurations are used. If global configurations are
not specified, default values are used.
Configures the deadtime value at the RADIUS server group
level.
• The minutes argument specifies the length of time, in
minutes, for which a RADIUS server is skipped over by
transaction requests, up to a maximum of 1440 (24
hours). The range is from 1 to 1440.
The example specifies a one-minute deadtime for RADIUS
server group radgroup1 when it has failed to respond to
authentication requests for the deadtime command
You can configure the group-level deadtime after
Note
the group is created.
Saves configuration changes.
When you issue the end command, the system prompts
•
you to commit changes:
Uncommitted changes found, commit them before
exiting(yes/no/cancel)?
[cancel]:
Entering yes saves configuration changes to the
–
running configuration file, exits the configuration
session, and returns the router to EXEC mode.
– Entering no exits the configuration session and
returns the router to EXEC mode without
committing the configuration changes.
Entering cancel leaves the router in the current
–
configuration session without exiting or
committing the configuration changes.
Use the commit command to save the configuration
•
changes to the running configuration file and remain
within the configuration session.
(Optional) Displays information about each RADIUS
server group that is configured in the system.
How to Configure AAA Services
SC-37