Introduction
This document describes how Cisco Internetwork Operating System (IOS) chooses Authentication, Authorization and Accounting (AAA) Server from the list of multiple AAA Servers configured, when a new style AAA Command Line Interpreter (CLI) radius server <AAA Server name> is used.
Prerequisites
Requirements
Cisco recommends that you have knowledge of these topics:
- AAA Server is reachable from the IOS Device (referrred to as Client Router from here on)
- Client Internet Protocol Address (IP Address) configured on AAA Server
- User policies configured on AAA Server
Components Used
This document is not restricted to specific software and hardware versions.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
Background Information
radius-server host <AAA Server IP address> will deprecate soon. Therefore, you need to migrate to new CLI radius server <AAA Server name>. Refer to this example from a laboratary router:
Client(config)#radius-server host 192.168.10.1
Warning: This CLI will be deprecated soon. Please move to radius server <name> CLI.
Configure
Note: Use the Command Lookup Tool (registered customers only) in order to obtain more information on the commands used in this section.
Configuration on the Client Router
This is an example of the configuration on the Client Router:
aaa new-model
aaa authentication ppp default group RAD1 local
aaa group server radius RAD1
server name SERVER1
server name SERVER2
radius server SERVER2
address ipv4 10.106.60.9 auth-port 1645 acct-port 1646
key cisco
radius server SERVER1
address ipv4 10.106.61.9 auth-port 1645 acct-port 1646
key cisco
Verify
Go through this video to verify.
Troubleshoot
There is currently no specific troubleshooting information available for this configuration.
Related Information
Feedback