cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
174
Views
0
Helpful
3
Replies
Highlighted
Beginner

Prime 3.5 compliance policy to find defunct ACS servers

A few months back I pushed out a configuration for our new AAA servers.  As part of that push I tried to also delete the old AAA servers.  This however did not work on all devices so now I have to create a policy that will find the old AAA servers both by name and IP.

 

Any help with this would be GREATLY appreciated.

 

 

3 REPLIES 3
VIP Advisor

Re: Prime 3.5 compliance policy to find defunct ACS servers

Hi

 

You need to remove all configurations for your old tacacs servers?

 

First I would look at aaa server group like the screenshots below:

 

image.png

image.png

 

Replace SRV-NAME by your real aaa server name. If the compliance policy founds it then just do the below fix cli:

aaa group server tacacs+ NAME-GRP

 no server-name SRV-NAME

 

Afterwards, you can search for tacacs server SRV-NAME and do a fix cli of no tacacs server SRV-NAME

 

Hope this helps.

 

 

 


Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
Beginner

Re: Prime 3.5 compliance policy to find defunct ACS servers

What goes under actions
VIP Advisor

Re: Prime 3.5 compliance policy to find defunct ACS servers

On the 2nd screenshot, what does under action is what I told you with the fix cli commands.

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards