Configuring Tacacs+ Server Groups - Cisco IOS XR Configuration Manual

Configuring AAA Services on Cisco IOS XR Software
What to Do Next
After configuring RADIUS server groups, define method lists by configuring authentication,
authorization, and accounting. (See the

Configuring TACACS+ Server Groups

This task configures TACACS+ server groups.
The user can enter one or more server commands. The server command specifies the hostname or IP
address of an external TACACS+ server. Once configured, this server group can be referenced from the
AAA method lists (used while configuring authentication, authorization, or accounting). (See the
"Method Lists"
Prerequisites
For configuration to succeed, the external server should be accessible at the time of configuration.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
aaa group server tacacs+ group-name
Example:
RP/0/RP0/CPU0:router(config)# aaa group server
tacacs+ tacgroup1
Step 3
server { hostname | ip-address }
Example:
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server
192.168.100.0
section.)
configure
aaa group server tacacs+ group-name
server {host-name | ip-address}
Repeat Step 3 for every external server to be added to the server group named in Step 2.
end
or
commit
show tacacs server-groups
"Configuring AAA Method Lists"
Purpose
Enters global configuration mode.
Groups different server hosts into distinct lists and enters
the server group configuration mode.
Specifies the hostname or IP address of an external
TACACS+ server.
When configured, this group can be referenced from the
•
AAA method lists (used while configuring
authentication, authorization, or accounting).
Cisco IOS XR System Security Configuration Guide
How to Configure AAA Services
section.)
SC-203