How can I configure AAA authentication on ASR9K?

Hi everyone,
I´m looking for how can I configure AAA authenticacion on ASR9K.
I have a TACACS+ server
Thanks and regards,
Jaime.

Hi Jaime,
here is the basic configuration:
tacacs-server host port 49
key 7 !
aaa group server tacacs+ acs-group
server
aaa authentication login acs-auth group acs-group local
line console
login authentication acs-auth
line default
login authentication acs-auth
An example:
RP/0/RSP1/CPU0:router#sh run tacacs-server
tacacs-server host 1.1.1.1 port 49
key 7 0822455D0A16544541
RP/0/RSP1/CPU0:router#sh run aaa group server tacacs+
aaa group server tacacs+ acs-group
server 1.1.1.1
RP/0/RSP1/CPU0:router#sh run aa authentication
aaa authentication login acs-auth group acs-group local
RP/0/RSP1/CPU0:router#sh run line default
line default
login authentication acs-auth
exec-timeout 0 0

Similar Messages

  • How can i configure autologin with network account?

    right now when i go to user preferences for network account, login window and options are non manageable for network users.
    im using network accounts on all public machines and now after reboot they all require manual logon, how can i configure autologin to use network account

    Did you try authenticating with a local admin account to get into the login options from a network user account? Then you might be able to set auto login for that account. I've set network accounts as admin users on particular machines that way.

  • HT4623 please help!! how can i configure my iphone 3gs because i've been updated a new version i did it but it's hard to activate it again.

    please help!! how can i configure my iphone 3gs because i've been updated a new version, i did it but it's hard to activate it again. this message i always recieved in my iphone
    "We're sorry, we are unable to continue with your activation at this time."

    You phone was hacked. You can not get help with it here. Hacking / Jailbreaking voids any warraty and forfeits your right to support. Discussing jailbroken / hacked devices is forbidden by the terms of service here.

  • How can I configure iCloud so it doesn't restore deleted or moved emails on my Mac?

    I moved to iCloud, and so far it looks like everything is where it's supposed to be. My question is about syncing. When I delete an email on my Mac, iCloud restores it. How can I configure iCloud so that changes I make on my Mac and my iPhone stay changed?

    On the Mac in System Preferences > iCloud
    Make sure Mail & Notes is selected.
    ON the iPhone tap Settings > iCloud
    Make sure Mail is switched on.
    And try restarting your Mac and iPhone.

  • How can I configure my new Mac Pro to output the timeline via HDMI

    How can I configure my new Mac Pro to output the timeline in FCP 7 (yes, I have X, but I'm using 7 right now). I have two monitors running from TB2, but want to have the third for a client monitor.
    If I use all three via TB2, it's literally three monitors, and I want to edit on my CineDisplay. I only want the client to see the timeline video on the third monitor. When I hook up HDMI I get no signal, in fact, I can't have the HDMI cable hooked up for TB2 to work with the third.
    Thanks,
    GEvans
    DarthPro
    3.7 QCIntelXeonE5
    12 GB
    AMD FirePro dual D300 2048MB
    OSX 10.9.2

    If you use all ThunderBolt displays, or stick with DisplayPort and Mini DisplayPort (free conversion between the two with only a cheap cable) you can have up to six displays.
    If you attach "legacy" displays with "any-old adapter", you can have up to two, and the built-in HDMI counts as one if you use it.
    Any more requires ACTIVE Adapters.
    The US$100 Apple ACTIVE Mini DisplayPort to Dual-Link DVI adapter works in every case, even displays over 1920 wide.
    StarTech and Accell make US$35 ACTIVE adpters that work for displays up to 1920 wide.

  • HT4356 How can I configure the printer to print only grey tones from my iPad 2? Printer=Hp6520

    How can I configure printer with iPad to print only grey tones? This works fine from my laptop - not air printing from that one though.  I can't find anywhere on the iPad how to do printer settings and this also seems not to be available as an option when doing a printout.  In fact, no options seem to be available.  Thanks in advance for reacting!
    Hermi

    There is currently no option for this. You can give Apple feedback here:
    http://www.apple.com/feedback/ipad.html

  • How can I configure ReFS to NOT fail read operations when a checksum error is detected (on non-Storage-Spaces volumes where data integrity streams are enabled)?

    According to William Stanek, in his Windows Server 2012 R2 Inside Out: Configuration, Storage & Essentials book, this is apparently possible: (pg. 615 - here it is on Google Books: https://books.google.ca/books?id=0IyfBAAAQBAJ&pg=PT819&lpg=PT819&dq=read+operation )
        Integrity can be enabled when the system is not running on Storage Spaces. When
        integrity is enabled and ReFS detects a checksum mismatch, ReFS logs an event and
        fails the read operation by default. If you don’t want the read operation to fail, you
        can configure ReFS to continue with the read operation. A related event will be logged
        regardless.
    So then how do I configure it to do that???
    (And just to make it super-clear, I'm NOT using Storage Spaces, so there is no redundancy via mirroring/parity, and I'm not expecting any file repair - just detection of corruption. It's just a basic volume formatted with ReFS and
    with integrity streams enabled, via format E: /fs:ReFS /i:enabled
    For those who want more details, here's the situation: 
    I try to perform a read operation on a file with corrupted data (purposely done for testing using a low-level disk editor), I get a the following error message:
    And an event ID 133 from ReFSv1 gets logged in the System log:
    Clicking "Try Again" just brings up the same message, and clicking "Skip" skips the operation entirely.
    This is indeed the correct default behaviour.
    What I want instead is for the read operation to be allowed to complete, with corrupt data and all, and ONLY for the event to be logged. And according to William Stanek, this is supposed to be configurable somewhere - and after hours of searching, I haven't
    been able to find anything.

    Hi Tommy,
    >>How can I configure ReFS to NOT fail read operations when a checksum error is detected
    We can use PowerShell command Set-FileIntegrity to configure this. The specific parameter for controlling this behavior is
    -Enforce <Boolean>which indicates whether to enable blocking access to a file if integrity streams do not match the data.  
    Regarding this point, the following article can be referred to as reference.
    Set-FileIntegrity
    https://technet.microsoft.com/en-us/library/jj218351.aspx
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • How can I configure a VM to boot from USB key in Virtual PC of Windows 7?

    Hi all,
    I want to boot up with a USB key to install a new VM on Windows 7. I heared that Microsoft Virtual PC begins to support USB device on Windows 7. How can i configure it? I don't find any virtual USB device in VM settings on my Windows 7 box.
    Thanks for any help.
    Scorprio
    TechNet Software Assurance Managed Newsgroup MCTS: Windows Vista | Exchange Server 2007 MCITP: Enterprise Support Technician | Server & Enterprise Admin

    Hi all,
    I want to boot up with a USB key to install a new VM on Windows 7. I heared that Microsoft Virtual PC begins to support USB device on Windows 7. How can i configure it? I don't find any virtual USB device in VM settings on my Windows 7 box.
    Thanks for any help.
    Scorprio
    TechNet Software Assurance Managed Newsgroup MCTS: Windows Vista | Exchange Server 2007 MCITP: Enterprise Support Technician | Server & Enterprise Admin
    Virtual PC does not support USB.  Windows 7 XP Mode Virtual Machine supports the use of USB devices.  Virtual PC and Windows 7 XP Mode VM are not the same thing!

  • How can i configure advance payment to vendors through cash jounal

    how can i configure advance payment to vendors through cash jounal pls its urgent for me kindly help me out

    HI,
    I think u need not configure anyting new for this, you can use the existing Business Tran. Type K and rename it as Vendor Advance for separate identity. You can do the normal FBCJ posting.
    But doing this you will not have separate identity for the Advances paid.
    Thanks
    VK

  • How can i configure STMS with out physical systems

    Dear Experts ,
    please solve my doubts
    here i installed one system in AIX and named it as DEV system in that system i need to perform post-installaion Activities
    and i started some activities also
    presently my doubt is in STMS configuration
    here i have only one system (DOMINE CONTROLLER) and we need to other systems while configuration but we dont have other systems like quality and production how can i configure that systems in my landscape
    this is my first implementation Experience please suggest me with some valuable suggestions
    my doubts:
    while creating systems we need to take for virtual systems or Extended systems
    which transport routes can i prefer for Dev to Qly systemand also Qly to Prd
    please reply me
    Regards

    Hi,
    If you have decided the SID's of the QUA and PRD systems then you can configure TMS with the virtual systems. Here are the steps to do so.
    Login to the domain controller
    Execute tcode STMS
    Goto the menu overvie --> systems (Shift+F6)
    SAP SYStems --> Create --> Virtual system
    Enter the SID and description and then save ur entries.
    Now the new virtual system will be created. Do the above for the others systems in the landscape.
    Again execute STMS and then click SHIFT+F7. You will goto the transport route window. Now you can configure TMS for the systems in the list as usual.
    Hope this helps.
    Regards,
    Varadharajan M

  • How can I configure NI PCI 6221 and DAQ SCB-68 for pressure sensors?

    Hello
    everybody,
    I am using the measuring board (NI PCI 6221) and DAQ
    SCB-68 for the data acquisition.
    With the DAQ-Assistant I created AI for the voltage of
    pressure sensors. In a big indicator panel from this DAQ-Assistant I see the
    voltage for both sensors in the correct size. But if I set sensors in the
    blockdiagramm to control the signals for sensor one I get a wrong voltage size
    and for sensor 2 nothing.
    How can I configure this data acquisition equipment to
    get the correct signals?
    Thanks a lot for your help.

    I do not know the type of sensor you are using. But pressure transducers may have a very low output voltage(in the mVolt range). They also need an excitation voltage. Here is an introduction. http://focus.ti.com.cn/cn/lit/an/sloa034/sloa034.pdfThen working with pressure sensors I always use 3 stages in the circuit.
    1 Instrumentation Amplifier as a preamp
    2 filterstage
    3 Final amp and output buffer
    (you may combine stage 2 and 3)
    Besides which, my opinion is that Express VIs Carthage must be destroyed deleted
    (Sorry no Labview "brag list" so far)

  • HT3887 how can i configure my wireless keyword so i can use the Function F keys to control volume etc...? I am using 10.5.8 OS

    how can i configure my wireless keyword so i can use the Function <F> keys to control volume etc...? I am using 10.5.8 OS

    little wireless cameras would not have the ability to send back to the base, even thought the base can reach it.
    Now if you take regular cameras and wire them into a Cisco switch that was attached to a wireless bridge that could shine back to the base...now you might have something, but your still going to have to do a survey/path analysis to determine if it is feasible.
    Coverage isnt throughput. I see one base station with 3 or 4 sectoral antennas depending on direction, pointing two several distribution bridges to bridge the gaps that go out again to the cameras...something like that. And all of it should be higher in the air than your construction.

  • How can I configure MA to display "speaking" OpCode and Task names

    If you have a custom ETW Eventsource definition: PerfView reads and Displays from the etl files the OpCode and Task values not as integer but as defined in EventSource inner classe for Task and in the
    System.Diagnostics.Tracing.EventOpCode. My question is, how can I configure the MA to display the values not as "magic numbers" or can MA get this feature?
    Regards,
    Alexander
    Kind regards, Alexander

    Hi Paul,
    please take a look to the attached picture. I've tried to make a comparison between automatically behavior of PerfView and Message Analyzer by displaying of the same performance log. The Message Analyzer got metadata, generated with wevtutil. The related
    part of the manifest is here:
    <tasks>
    <task name="ReadingFromGdb" value="1"/>
    <task name="LogReadPreInvoke" value="65532"/>
    </tasks>
    <opcodes>
    </opcodes>
    <keywords>
    <keyword name="Perf" message="$(string.keyword_Perf)" mask="0x8"/>
    <keyword name="Gdb" message="$(string.keyword_Gdb)" mask="0x10"/>
    </keywords>
    <events>
    <event value="8" version="0" level="win:Verbose" message="$(string.event_LogGdbReadPreInvoke)" keywords="Perf Gdb" opcode="win:Start" task="ReadingFromGdb" template="LogGdbReadPreInvokeArgs"/>
    </events>
    <templates>
    <template tid="LogGdbReadPreInvokeArgs">
    <data name="fullName" inType="win:UnicodeString"/>
    <data name="methodName" inType="win:UnicodeString"/>
    </template>
    I hope, it helps you to understand details of my questions.
    Regards,
    Alexander
    Kind regards, Alexander

  • How can we configure or control records go into single idoc thru BODS?

    Hi,
    Our case is -
    IDOC format has three segment. Each segments has child nodes -
    1. CONTROL SEGMENT - This is required only once per idoc.
    child1
    child2
    2. SEGMENT1 - sinlge source record to be broken into two segments.
    child1
    child2
    3. SEGMENT2 - sinlge source record to be broken into two segments.
    child1
    child2
    we have a single source (lest say having 100 records).
    In the current design which does generates IDOCS but as many as the no of records in source. Currently we use a row generation transform as dummy (with row count as 1) to pass to the IDOC parent nodes's from clause to escape the error - invalid input to the parent nodes.
    Child nodes are either mapped to the source table or are null.
    Question - How can we configure this in a way that we control how many records go into single idoc. Ex - lets say 50 per idoc so only 2 idoc should be created if 100 records are there.

    HI,
    this sounds to me like Data Services. If so I would suggest to post this into the Data Service forum.
    regards
    Ingo HIlgefort

  • How can we configure in MSS to view Employee work schedule?

    Hi,
    How can we configure in MSS to view Employee work schedule?
    Regards,
    Poornima

    Hi,
    Can you please tell me what is your exact requirement?....
    I think in the standard MSS package there is an iview for viewing the workschedule related information like Hours/day, Hrs/week, hrs/month and hrs/year for a position.
    However, if you want to view the workschedule for employee, it can easily be configured through the OADP.
    You can create a custom Function module for fetching the workschedule for each employee and after creating a custom column, add it to any data view.
    Thanks,
    Pinki

Maybe you are looking for