Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 40

How to Configure AAA Services
7.
8.
9.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
tacacs-server host host-name port port-number
Example:
RP/0/RP0/CPU0:router(config)# tacacs-server
host 209.165.200.226 port 51
RP/0/RP0/CPU0:router(config-tacacs-host)#
Step 3
tacacs-server host host-name timeout seconds
Example:
RP/0/RP0/CPU0:router(config-tacacs-host)# tacac
s-server host 209.165.200.226 timeout 30
RP/0/RP0/CPU0:router(config)#
Step 4
tacacs-server host host-name key [0 | 7]
auth-key
Example:
RP/0/RP0/CPU0:router(config)# tacacs-server
host 209.165.200.226 key 0 a_secret
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-34
Repeat Step 2. through Step
end
or
commit
show tacacs
5. for each external server to be configured.
Purpose
Enters global configuration mode.
Specifies a TACACS+ host server and optionally specifies a
server port number.
This option overrides the default, port 49. Valid port
•
numbers range from 1 to 65535.
Specifies a TACACS+ host server and optionally specifies a
timeout value that sets the length of time the AAA server
will wait to receive a response from the TACACS+ server.
This option overrides the global timeout value set with
•
the tacacs-server timeout command for this server
only. The timeout value is expressed as an integer in
terms of timeout interval seconds. The valid timeout
range is from 1 to 1000 seconds.
Specifies a TACACS+ host server and optionally specifies
an authentication and encryption key shared between the
AAA server and the TACACS+ server.
• The TACACS+ packets are encrypted using this key.
This key must match the key used by TACACS+
daemon. Specifying this key overrides the global key
set by the tacacs-server key command for this server
only.
(Optional) Entering 0 indicates that an unencrypted
•
(clear-text) key will follow.
(Optional) Entering 7 indicates that an encrypted key
•
will follow.
• The auth-key argument specifies the encrypted or
unencrypted key to be shared between the AAA server
and the TACACS+ server.
Configuring AAA Services on Cisco IOS XR Software
OL-20382-01