Key precedence when using aaa group server and radius-server host

klaustecnico — Mon, 24 Feb 2020 19:11:01 GMT

Looking at the following configuration on a Cisco Router:

!
aaa group server radius 8021x
server-private 192.168.1.1 auth-port 1812 acct-port 1813 key SECRET-A
!
aaa group server radius radius-auth
server-private 192.168.2.1 auth-port 1645 acct-port 1646 key SECRET-B
!
radius-server host 192.168.1.1 auth-port 1812 acct-port 1813 key SECRET-C
!

The question is:

When considering the radius server 192.168.1.1 which password / key will take precedence: SECRET-A or SECRET-B ?

Reading the documentation posted below the answer is:

SECRET-A, because:
In cases where both global commands and server commands are used, the server command will take precedence over the global command.

Does anyone know if this is correct ? Which key will take precedence ?

See:

See: http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfrad.html#wp1001168

See: http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfrad.html#wp1001482

topic Key precedence when using aaa group server and radius-server host in Network Access Control

Key precedence when using aaa group server and radius-server host