Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 44

How to Configure AAA Services
What to Do Next
After configuring RADIUS server groups, define method lists by configuring authentication,
authorization, and accounting. (See the
Configuring TACACS+ Server Groups
This task configures TACACS+ server groups.
The user can enter one or more server commands. The server command specifies the hostname or IP
address of an external TACACS+ server. Once configured, this server group can be referenced from the
AAA method lists (used while configuring authentication, authorization, or accounting). (See the
"Method Lists"
Prerequisites
For configuration to succeed, the external server should be accessible at the time of configuration.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
aaa group server tacacs+ group-name
Example:
RP/0/RP0/CPU0:router(config)# aaa group server
tacacs+ tacgroup1
Step 3
server {hostname | ip-address}
Example:
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server
192.168.100.0
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-38
section.)
configure
aaa group server tacacs+ group-name
server {host-name | ip-address}
Repeat Step 3. for every external server to be added to the server group named in Step
end
or
commit
show tacacs server-groups
Configuring AAA Services on Cisco IOS XR Software
"Configuring AAA Method Lists"
Purpose
Enters global configuration mode.
Groups different server hosts into distinct lists and enters
the server group configuration mode.
Specifies the hostname or IP address of an external
TACACS+ server.
• When configured, this group can be referenced from the
AAA method lists (used while configuring
authentication, authorization, or accounting).
section.)
2.
OL-20382-01