Prime 3.5 compliance policy to find defunct ACS servers

[tverhoeven]

A few months back I pushed out a configuration for our new AAA servers.  As part of that push I tried to also delete the old AAA servers.  This however did not work on all devices so now I have to create a policy that will find the old AAA servers both by name and IP.

Any help with this would be GREATLY appreciated.

[Francesco Molino]

Hi

You need to remove all configurations for your old tacacs servers?

First I would look at aaa server group like the screenshots below:

Replace SRV-NAME by your real aaa server name. If the compliance policy founds it then just do the below fix cli:

aaa group server tacacs+ NAME-GRP

 no server-name SRV-NAME

Afterwards, you can search for tacacs server SRV-NAME and do a fix cli of no tacacs server SRV-NAME

Hope this helps.

[tverhoeven]

What goes under actions

[Francesco Molino]

On the 2nd screenshot, what does under action is what I told you with the fix cli commands.