topic Re: AAA Auth Question in Network Security

AAA Auth Question

Anthonize Rajaratne — Thu, 02 Jan 2025 13:56:09 GMT

Hello,

Does anyone know what is the difference between below commands?

I tested both, found out outcome was the same. Only thing I found was getting the below warning when I execute figure1.0 command,

%PARSER-5-HIDDEN: Warning!!! ' aaa authentication login default group TACACS-ISE tacacs+ local ' is a hidden command.

figure 1.0

aaa authentication login default group TACACS-ISE group tacacs+ local

figure 1.1

aaa authentication login default group tacacs+ group TACACS-ISE local

MHM Cisco World — Thu, 02 Jan 2025 14:14:21 GMT

It not same

First command will check

A- group TACACS

B- tacacs server as individual not as group

C- group

When second will check

A- tacacs server as individual

B- group TACACS

C- local

If all tacacs list under one group then use only group TACACS local'

No need individual tacacs server because it already list under group

MHM

MHM Cisco World — Thu, 02 Jan 2025 14:15:43 GMT

One more points also important

Cisco not recommend using specific name of server group inlcude

Local' radius tacacs+

MHM