This document describes how Cisco Internetwork Operating System (IOS) chooses Authentication, Authorization and Accounting (AAA) Server from the list of multiple AAA Servers configured, when a new style AAA Command Line Interpreter (CLI) radius server <AAA Server name> is used.
Cisco recommends that you have knowledge of these topics:
AAA Server is reachable from the IOS Device (referrred to as Client Router from here on)
Client Internet Protocol Address (IP Address) configured on AAA Server
User policies configured on AAA Server
This document is not restricted to specific software and hardware versions.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
radius-server host <AAA Server IP address> will deprecate soon. Therefore, you need to migrate to new CLI radius server <AAA Server name>. Refer to this example from a laboratary router:
Client(config)#radius-server host 192.168.10.1 Warning: This CLI will be deprecated soon. Please move to radius server <name> CLI.
This is an example of the configuration on the Client Router:
aaa new-model aaa authentication ppp default group RAD1 local aaa group server radius RAD1 server name SERVER1 server name SERVER2 radius server SERVER2 address ipv4 10.106.60.9 auth-port 1645 acct-port 1646 key cisco radius server SERVER1 address ipv4 10.106.61.9 auth-port 1645 acct-port 1646 key cisco
Go through this video to verify.
There is currently no specific troubleshooting information available for this configuration.