3 Device Configuration

This chapter details the authentication methods supported on Oracle Communications IP Service Activator Cisco IOS XR cartridge, and describes the required manual pre-configuration to support various options and services.

Supported Authentication Methods

The IP Service Activator Cisco IOS XR cartridge supports the following authentication methods on all devices:

• Telnet with TACACS+

• SSH with password authentication

Note:

Anonymous without enable is invalid for Cisco.

Manual Pre-configuration

This section describes the manual pre-configuration required by the IP Service Activator Cisco IOS XR cartridge to support various options and services.

Configuring SNMP

Simple Network Management Protocol (SNMP) must be enabled on all routers for the IP Service Activator discovery process to work. Ensure the following line is included in the router configuration:

snmp-server community community-name RO

Note:

Setup SNMP for the IP Service Activator discovery process using a community name (typically public). You can set the authentication as required. As a best practice make the Community read-only. The network discovery process uses a default community of public; you will need to amend the appropriate SNMP parameter in the Discovery dialog if you set a different read community on the devices.

Configuring SSH

To use Secure Shell (SSH) authentication, you need to configure an SSH server on the device.

The device must have a hostname and domain-name.

In configuration mode, enter the following commands:

crypto key generate rsa

You are prompted for a modulus size for the key. The default is 512, but Cisco recommends the use of a minimum modulus size of 1024 bits.

ip ssh time-out 120
ip ssh authentication-retries 3

Note:

On later versions of IOS, SSH is configured automatically when the device is booted. For more information, see the Cisco documentation.