Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 33

Configuring AAA Services on Cisco IOS XR Software
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
radius-server host {hostname | ip-address}
[auth-port port-number] [acct-port port-number]
[timeout seconds] [retransmit retries] [key
string]
Example:
RP/0/RP0/CPU0:router(config)# radius-server
host host1
Step 3
radius-server retransmit retries
Example:
RP/0/RP0/CPU0:router(config)# radius-server
retransmit 5
Step 4
radius-server timeout seconds
Example:
RP/0/RP0/CPU0:router(config)# radius-server
timeout 10
OL-20382-01
Purpose
Enters global configuration mode.
Specifies the hostname or IP address of the remote RADIUS
server host.
Use the auth-port port-number option to configure a
•
specific UDP port on this RADIUS server to be used
solely for authentication.
Use the acct-port port-number option to configure a
•
specific UDP port on this RADIUS server to be used
solely for accounting.
• To configure the network access server to recognize
more than one host entry associated with a single IP
address, simply repeat this command as many times as
necessary, making sure that each UDP port number is
different. Set the timeout, retransmit, and encryption
key values to use with the specific RADIUS host.
If no timeout is set, the global value is used; otherwise,
•
enter a value in the range 1 to 1000. If no retransmit
value is set, the global value is used; otherwise enter a
value in the range 1 to 100. If no key string is specified,
the global value is used.
The key is a text string that must match the
Note
encryption key used on the RADIUS server. Always
configure the key as the last item in the
radius-server host command syntax because the
leading spaces are ignored, but spaces within and at
the end of the key are used. If you use spaces in your
key, do not enclose the key in quotation marks
unless the quotation marks themselves are part of
the key.
Specifies the number of times the Cisco IOS XR software
searches the list of RADIUS server hosts before giving up.
In the example, the number of retransmission attempts
•
is set to 5.
Sets the number of seconds a router waits for a server host
to reply before timing out.
In the example, the interval timer is set to 10 seconds.
•
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
How to Configure AAA Services
SC-27