ASR 9000 IOS XR TACACS

[joshuacmoore]

Does anyone have any experience with getting command authorization to work on an ASR 9000 and using TACACS.NET?

If not, is there any way to just use TACACS for authentication and have all authenticated users thrown into the cisco-support level of authorization?

[Vinit Jain]

- Could you please let me know what version of code are you running.

You can perform the command authorization using the below CLI:

http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r4-2/security/command/reference/b_syssec_cr42asr9k/b_syssec_cr42asr9k_chapter_01.html#wp3674188447

Also let me know if you are looking for anything specific thing on ASR9k using tacacs.

Hope this helps.

[joshuacmoore]

I want to accomplish authentication through TACACS but authorization locally for all TACACS authenticated users without having to create users on the ASR. What would the recommended config look like for this?

I'm running 4.1.1