Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASR 9000 IOS XR TACACS

Does anyone have any experience with getting command authorization to work on an ASR 9000 and using TACACS.NET?

If not, is there any way to just use TACACS for authentication and have all authenticated users thrown into the cisco-support level of authorization?

2 REPLIES
Cisco Employee

- Could you please let me

- Could you please let me know what version of code are you running.

You can perform the command authorization using the below CLI:

 

http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r4-2/security/command/reference/b_syssec_cr42asr9k/b_syssec_cr42asr9k_chapter_01.html#wp3674188447

Also let me know if you are looking for anything specific thing on ASR9k using tacacs.

Hope this helps.

Thanks
--VJ
New Member

I want to accomplish

I want to accomplish authentication through TACACS but authorization locally for all TACACS authenticated users without having to create users on the ASR. What would the recommended config look like for this?

 

I'm running 4.1.1

85
Views
0
Helpful
2
Replies