Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

aaa group server: server or private-server

Hi,

I'm a bit confused on when to use the SERVER A.B.C.D command of SERVER-PRIVATE A.B.C.D command in the following:

aaa group server tacacs+ acs-servers

server-private 10.1.2.2 single-connection key 7 12345

server-private 10.1.2.3 single-connection key 7 12345

What exactly is the diference between 'server-private' and 'server'? If it where to make a difference in RFC1918 and non-RFC1918 addresses, then what's the extra functionality?

Erik

Everyone's tags (3)
3 REPLIES

aaa group server: server or private-server

Hello. Here the word "private" doesn't relate to RFC1918.

If you use the "server" command within the "aaa group server" , this server could be used in another groups, sometimes unintentionally.

On the other hand the "server-private" comand within the "aaa group server", assures you this server will only be used by this group.

please rate if this helps

Cisco Employee

Re: aaa group server: server or private-server

Use the server-private command to associate a particular private server with a defined server group.  Private servers (servers with private addresses) can be defined within the server group and remain hidden from other groups, while the servers in the global pool (for example, default radius server group) can still be referred to by IP addresses and port numbers. Thus, the list of servers in server groups includes references to the hosts in the global configuration and the definitions of private servers.

~BR
Jatin Katyal

**Do rate helpful posts**

~BR Jatin Katyal **Do rate helpful posts**
New Member

aaa group server: server or private-server

Ok thanks! This helps!

- What practical benefit would it give to hide servers from other groups? What kind of scenario could that be?

- Say i would want to use the servers i mentioned for Tacacs AND Radius, does that mean i should not be using 'server-private'?

Erik

4177
Views
10
Helpful
3
Replies