Users Guide

Security Commands 948
User Guidelines
Assigning a name to multiple RADIUS authentication servers associates the
servers into a list. Server lists may be used to control which authentication
servers are prioritized for traffic. Names assigned to accounting servers are
ignored.
Names may consist of alphanumeric characters and the underscore, dash and
blanks. Embed the name in double quotes to use a name with blanks.
NOTE: When multiple RADIUS servers are configured with different list names, e.g.
ServerName is name1 and address is 1.1.1.1 ServerName is name2 and address is 1.1.1.2
the RADIUS request is always sent to the first lexicographically ordered server list, i.e.
communication with the name1 server list is attempted before moving on to the name2
server list. Even if the priority value of servers in the name2 list is lower (lower value
indicates higher priority) the request is sent to the name1 servers. If no servers respond in
the name1 list, the request is sent to the second name list in lexicographic order, et. seq.
A server list may consist of multiple primary server and multiple secondary
servers. Within a server list, communication the primary servers is attempted
first in priority order. From the multiple secondary servers, the server with the
lowest priority value is tried after the primary fails. For a server list where all
priorities are equal, communication is attempted based on the server name
lexicographic order. For example, if name9, name1, name6 are configured in a
server list, communication is attempted in the order name1, then name6,
then name9.
Use the show aaa servers name command to display the server lists.
Example
console(config)#radius server 44.44.44.44
console(config-auth-radius)#name NAME
console(config-auth-radius)#no name
primary
Use the primary command to specify that a configured server should be the
primary server in a server list. Multiple primary servers can be configured for
each group of servers which have the same name. When the RADIUS client
has to perform transactions with an authenticating RADIUS server of the
specified name, it uses the primary server that has the specified server name