server

Description

Adds a TACACS+/RADIUS server to a server-group. Only the configured TACACS+/RADIUS servers are allowed to be added within the server group. If the same server name exists with multiple ports or multiple VRFs, specify the server name, port, and VRF when adding the server to the server-group.

The no form of this command removes a TACACS+/RADIUS server from a server-group.

Command context

config-sg

Parameters

{<FQDN> | <IPV4> | <IPv6>}

Specifies the server as:

• <FQDN>: a fully qualified domain name.

• <IPV4>: an IPv4 address.

• <IPV6>: an IPv6 address.

port <PORT-NUMBER>

Specifies the authentication port number. Range: 1 to 65535. Default TACACS+ (TCP): 49, RADIUS (UDP): 1812.

If a port number is not provided, the system searches the TACACS+/RADIUS server by host name and sets the default authentication port. Group server priority is assigned based on the sequence in which the servers are added.

vrf <VRF-NAME>

Specifies the VRF instance, such as default, mgmt, or a configured VRF instance. The maximum length is 32 characters.

Authority

Administrators

Examples

Adding a server to TACACS+ server group sg1 by providing an IPv4 address, port number, and VRF name:

switch(config)# aaa group server tacacs sg1 
switch(config-sg)# server 1.1.1.2 port 32 vrf mgmt

Adding a server to TACACS+ server group sg2 by providing an IPv6 address and default VRF:

switch(config)# aaa group server tacacs sg2
switch(config-sg)# server 2001:0db8:85a3:0000:0000:8a2e:0370:7334 vrf default

Adding a server to RADIUS server group sg3 by providing an IPv4 address, port number, and VRF name:

switch(config)# aaa group server radius sg3
switch(config-sg)# server 1.1.1.5 port 12 vrf mgmt

Adding a server to RADIUS server group sg4 by providing an IPv6 address and default VRF:

switch(config)# aaa group server radius sg4
switch(config-sg)# server 2001:0db8:85a3:0000:0000:8a2e:0371:7334 vrf default

Adding a server to RADIUS server group sg4 by providing an IPv4 address, port number, and VRF name:

switch(config)# aaa group server radius sg4
switch(config-sg)# server 1.1.1.6 port 32 vrf vrf_red

Specifying an IPv4 address when removing a TACACS+ server from server group sg1:

switch(config)# aaa group server tacacs sg1
switch(config-sg)# no server 1.1.1.2 port 12 vrf mgmt

Specifying an IPv6 address when removing a TACACS+ server from server group sg2 with the default VRF:

switch(config)# aaa group server tacacs sg2
switch(config-sg)# no server 2001:0db8:85a3:0000:0000:8a2e:0370:7334 vrf default