Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 32

How to Configure AAA Services
unique identifier enables RADIUS requests to be sent to multiple UDP ports on a server at the same IP
address. If two different host entries on the same RADIUS server are configured for the same
service—for example, accounting—the second host entry configured acts as an automatic switchover
backup to the first one. Using this example, if the first host entry fails to provide accounting services,
the network access server tries the second host entry configured on the same device for accounting
services. (The RADIUS host entries are tried in the order they are configured.)
A RADIUS server and a Cisco router use a shared secret text string to encrypt passwords and exchange
responses.To configure RADIUS to use the AAA security commands, you must specify the host running
the RADIUS server daemon and a secret text (key) string that it shares with the router.
The timeout, retransmission, and encryption key values are configurable globally for all RADIUS
servers, on a per-server basis, or in some combination of global and per-server settings. To apply these
settings globally to all RADIUS servers communicating with the router, use the three unique global
commands: radius-server timeout, radius-server retransmit, and radius-server key. To apply these
values on a specific RADIUS server, use the radius-server host command.
You can configure both global and per-server timeout, retransmission, and key value commands
Note
simultaneously on the same Cisco network access server. If both global and per-server functions are
configured on a router, the per-server timer, retransmission, and key value commands override global
timer, retransmission, and key value commands.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-26
configure
radius-server host {hostname | ip-address} [auth-port port-number] [acct-port port-number]
[timeout seconds] [retransmit retries] [key string]
radius-server retransmit retries
radius-server timeout seconds
radius-server key {0 clear-text-key | 7 encrypted-key | clear-text-key}
radius source-interface type instance [vrf vrf-id]
Repeat Step 2. through Step
end
or
commit
show radius
6. for each external server to be configured.
Configuring AAA Services on Cisco IOS XR Software
OL-20382-01