ACS Server "Device List" isn't working

[Beacon Bits]

Hi everyone,

In my lab setup, I configured ACS server and created some test user accounts.

I added my switch in the ACS Client Device list and users are being authenticating perfectly fine.

In second lab scenario, where I haven't added second switch in the ACS Client Device List but only pointing my Second switch to ACS server. Strangely, I can see that I can logon into the switch through users I've created in the ACS Server.

My question is .. What role does ACS Client Device List play. 

If ACS is authenticating my users without adding my second switch then what's the point ....

OR

Am I missing any config to check if the devices are in some sort of Trusted list?

Please advise...

Regards,

S

[darknair]

I believe the client list you put the switch into is used for remote management of that device and not for authenticating users.

[Beacon Bits]

Thank you guys...

I have found answer to my own question is that.

Below the "Network Devices and AAA Clients" there is "Default Network devices".. this defines the default shared secret for the radius devices. if device is not listed in the Network Device list but has the same shared secret then ACS take the device as default device provided the shared secret is configured same as the one in the Device list.

Regards,

S