topic Re: Remove aaa-server configuration in pix in Network Access Control

Remove aaa-server configuration in pix

kjanakiraman — Fri, 21 Feb 2020 18:11:54 GMT

I have cisco pix 515 with version 6.x and i have configured radius authenitcation for client vpn connection. The radius server is windows 2003, and i have the following commands

aaa-server test protocol radius

aaa-server test (inside) host x.x.x.x1 password timeout 10.

The vpn is working fine, Now i want to change the radius server and i want to remove the command and add new one, but i am getting errors like

when i give

clear aaa-server test, Iget an error message

you must remove all AAA corresponding entries prior to

remove the last server in group test

When i give

no aaa-server test (inside) host x.x.x.x1 password timeout 10. I get

you must remove all AAA corresponding entries prior to

removing the last server in group test

When i give

no aaa-server test protocol radius i get

AAA servers configured! cannot remove server_tag.

I am in a loop. Can some one adivce me how to remove the aaa-server tag test from the firewall

Thanks in advance

Re: Remove aaa-server configuration in pix

matthew.long — Wed, 01 Dec 2004 12:05:08 GMT

Can't you add the new server entry and then remove the old, this will avoid removing the last server in the list?

Re: Remove aaa-server configuration in pix

kjanakiraman — Wed, 01 Dec 2004 12:08:47 GMT

I can try that, but if i want to compeltely remove the radius from the network then i need to remove the aaa configuration from my firewall.

Re: Remove aaa-server configuration in pix

matthew.long — Wed, 01 Dec 2004 13:44:01 GMT

you are probably still referencing it in the vpn setting somewhere.

e.g.

crypto map mymap client authentication TEST

You need to remove this first

Re: Remove aaa-server configuration in pix

kjanakiraman — Wed, 01 Dec 2004 14:12:38 GMT

Thanks a lot