Default server groups

The switch always has these four default groups:
  • tacacs: for remote AAA, always contains every configured TACACS+ server.

  • radius: for remote AAA, always contains every configured RADIUS server.

  • local: for local authentication.

  • none: for local (RBAC) authorization.

User-defined AAA servers are always added to the matching default group, either tacacs or radius. Optionally, each server can also be added to exactly one additional user-defined (custom) group. A maximum of 28 user-defined groups can be created.

The order in which servers are added to a group is important. The server added first is accessed first, and if necessary, the second server is accessed second, and so on.