System Setup and Software Installation Guide for Cisco NCS 1010, IOS XR Releases

PDF

System Setup and Software Installation Guide for Cisco NCS 1010, IOS XR Releases

Configure TACACS+ server

Updated: September 11, 2026

Want to summarize with AI?

Log in

Use this procedure to configure a TACACS+ server. It supports AAA configuration by defining the required TACACS+ server settings and related authentication details.

Use this task to configure TACACS+ server.

Enabling the AAA accounting feature on a switch allows it to track the network services that users are accessing and the amount of network resources they are using. The switch then sends this user activity data to the TACACS+ security server in the form of accounting records. Each record contains attribute-value pairs and is saved on the security server for analysis. This data can be used for network management, client billing, or auditing purposes.

To configure TACACS+ server, perform these steps:

Before you begin

Follow these steps to configure TACACS+ server.

Procedure

  1. Enter into the IOS XR configuration mode.

    Example:

    RP/0/RP0/CPU0:ios#configure

  2. Enable the TACACS+ accounting to send a start-record accounting notice at the beginning of a privileged EXEC process and a stop-record at the end.

    Example:

    RP/0/RP0/CPU0:ios(config)#aaa accounting exec default start-stop group TACACS_ALL

  3. Create a default command accounting method list for accounting services provided by a TACACS+ security server. This list is configured for privilege level commands and set with a stop-only restriction.

    Example:

    RP/0/RP0/CPU0:ios(config)#aaa accounting exec default start-stop group TACACS_ALL