Cisco Cisco ASR 5700
Command Line Interface Overview
CLI Administrative Users ▀
Command Line Interface Reference, StarOS Release 17 ▄
127
The default value is 1 (CLI).
RADIUS Mapping System
RADIUS server configuration depends on the type of server used and the instructions distributed by the server
manufacturer. The following table shows the supported attribute/value mapping system that is constant, regardless of
server manufacturer or model:
manufacturer. The following table shows the supported attribute/value mapping system that is constant, regardless of
server manufacturer or model:
Table 1. RADIUS Attribute/Value Mapping System
Attribute
Value
Framed
2
Administrative (Administrator)
6
NAS_Prompt
7
Authenticate_Only
8
Authorize_Only
17
Inspector
19650516
Security_Admin
19660618
RADIUS Privileges
There are four RADIUS privilege roles. The following table shows the relationship between the privilege roles in the
CLI configuration and RADIUS Service-Type.
CLI configuration and RADIUS Service-Type.
Table 2. CLI Privilege Roles and RADIUS Service Types
CLI Configuration Parameter
RADIUS Service Type
show admin Type
administrator
Security_Admin (19660618)
admin
config_administrator
Administrative (6)
cfgadm
operator
NAS_Prompt (7)
oper
inspector
Inspector (19650516)
inspect
Authenticating Administrative Users with TACACS+
The ASR 5x00 or StarOS virtual machine is identified as a Network Access Server (NAS) and remotely accesses the
Terminal Access Controller Access Control System+ (TACACS+) server for information about users who can perform
administrative operations on the system.
Terminal Access Controller Access Control System+ (TACACS+) server for information about users who can perform
administrative operations on the system.