Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 8

Release 3.3.0
Release 3.4.0
Release 3.5.0
Release 3.6.0
Release 3.7.0
Release 3.8.0
Release 3.9.0
Contents
•
•
•
•
•
•
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-2
•
•
•
•
•
•
•
•
•
•
•
•
No modification.
The eventmanager keyword (fault manager) replaces the exec keyword to
authorize event managers (fault managers) from the aaa authorization
command.
No modification.
Information was edited to make clearer which features are supported on the
Cisco CRS-1 exclusively.
No modification.
Prerequisites for Configuring AAA Services, page SC-3
Restrictions for Configuring AAA Services, page SC-3
Information About Configuring AAA Services, page SC-3
How to Configure AAA Services, page SC-18
Configuration Examples for Configuring AAA Services, page SC-56
Additional References, page SC-58
Support for the RADIUS Dead-Server Detection feature was added.
To enable interoperability based on Cisco IOS software, tasks must be
marked as an optional attribute.
Support was added on Cisco IOS XR to allow you to specify task IDs
as an attribute in the external RADIUS or TACACS+ server. If the
server is also shared by non-Cisco IOS XR systems, these attributes are
marked as optional as indicated by the server documentation. For
example, CiscoSecure ACS and the freeware TACACS+ server from
Cisco require an asterisk (*) instead of an equal sign (=) before the
attribute value for optional attributes.
A procedure on how to specify the task ID and user groups by using the
CiscoSecure ACS was added.
All references to owner secure domain router (SDR) were replaced
with root SDR.
Support was added to prompt the next logged-in user for a new
username and password if all the users were deleted.
The predefined task group serviceadmin was added.
An example was added for RADIUS Vendor -Specific Attribute (VSA).
EXEC authorization was added to the
The server-private command was added to configure RADIUS server
groups.
Support for the Per VRF AAA feature was added.
Support for generating interim accounting records was added.
Configuring AAA Services on Cisco IOS XR Software
"Administrative Access" section.
OL-20382-01