Cisco Router IOS XR Bedienungsanleitung PDF herunterladen (Seite 44)

Cisco IOS XR Training Page 44

From another terminal, SSH into the box using a TACACs account, and if

successful, commit again.

RP/0/RSP0/CPU0:PE2(config)#commit

Thu Oct 18 03:23:22.951 UTC

% Confirming commit for trial session.

RP/0/RSP0/CPU0:PE2(config)#

That is normal TACACS, now time to add in the challenges of a VRF.

First up, we need to set our source interface, for this one I will use a

different Loopback, Lo100 and use VRF CustA

RP/0/RSP0/CPU0:PE2(config)#tacacs source-interface Loopback100 vrf CustA

Now we can configure our TACACS server

RP/0/RSP0/CPU0:PE2(config)#tacacs-server host 192.168.100.100

RP/0/RSP0/CPU0:PE2(config-tacacs-host)#key 0 TacacsPassword

RP/0/RSP0/CPU0:PE2(config-tacacs-host)#exit

RP/0/RSP0/CPU0:PE2(config)#

Now we need to create a server group for the ACS box. This tells it what VRF

the server is in.

RP/0/RSP0/CPU0:PE2(config)#aaa group server tacacs+ ACS

RP/0/RSP0/CPU0:PE2(config-sg-tacacs)# server 192.168.100.100

RP/0/RSP0/CPU0:PE2(config-sg-tacacs)# vrf CustA

Now we can configure our local logins for the console:

RP/0/RSP0/CPU0:PE2(config)#aaa authentication login console local

RP/0/RSP0/CPU0:PE2(config)#aaa authorization commands console none

RP/0/RSP0/CPU0:PE2(config)#line console

RP/0/RSP0/CPU0:PE2(config-line)# login authentication console

RP/0/RSP0/CPU0:PE2(config-line)# authorization commands console

Here I would commit the configs that we have done.

RP/0/RSP0/CPU0:PE2(config)#commit

And finally configure our AAA for login

RP/0/RSP0/CPU0:PE2(config)#aaa authentication login default group ACS local

RP/0/RSP0/CPU0:PE2(config)#aaa authorization commands default group ACS none

RP/0/RSP0/CPU0:PE2(config)#aaa accounting exec default start-stop group ACS

RP/0/RSP0/CPU0:PE2(config)#aaa accounting system default start-stop group ACS

RP/0/RSP0/CPU0:PE2(config)#aaa accounting commands default start-stop group

ACS

RP/0/RSP0/CPU0:PE2(config)#

1 2 ... 39 40 41 42 43 44 45 46 47 48 49 ... 104 105

Keine Kommentare

Cisco Router IOS XR Bedienungsanleitung Seite 44