ESR service routers. ESR-Series. Functionality description. Version 1.12.0
259
•
•
•
•
Step
Description
Command
Keys
13
Configure radius in the list of user
session accounting methods
(optional).
esr(config)# aaa
accounting login start-
stop <METHOD 1>
[ <METHOD 2> ]
<METHOD> – accounting methods:
tacacs – session accounting
by TACACS;
radius – session accounting
by RADIUS.
14
Switch to the corresponding
terminal configuration mode.
esr(config)# line
<TYPE>
<TYPE> – console type:
console – local console;
ssh – secure remote console.
15
Activate user login authentication
list.
esr(config-line-
console)# login
authentication <NAME>
<NAME> – list name, set by the string
of up to 31 characters. Created in
step 8.
16
Activate authentication list of user
privileges elevation.
esr(config-line-
console)# enable
authentication <NAME>
<NAME> – list name, set by the string
of up to 31 characters. Created in
step 9.
7.2.2 AAA configuration algorithm via TACACS
Step
Description
Command
Keys
1
Set the DSCP code global value for
the use in IP headers of TACACS
server egress packets (optional).
esr(config)# tacacs-
server dscp <DSCP>
<DSCP> – DSCP code value, takes
values in the range of [0..63].
Default value: 63.
2
Set the global value of the interval
after which the router assumes
that the TACACS server is not
available (optional).
esr(config)# tacacs-
server timeout <SEC>
<SEC> – time interval in seconds,
takes values of [1..30].
Default value: 3 seconds.
3
Add TACACS server to the list of
used servers and switch to its
configuration mode.
esr(config)# tacacs
-server host
{ <IP-ADDR> | <IPV6-
ADDR> } [ vrf <VRF> ]
esr(config- tacacs
-server)#
<IP-ADDR> – TACACS server IP
address, defined as
AAA.BBB.CCC.DDD where each part
takes values of [0..255]
<IPV6-ADDR> – TACACS server IPv6
address, defined as X:X:X:X::X where
each part takes values in hexadecimal
format [0..FFFF]
<VRF> – VRF instance name, set by
the string of up to 31 characters.
