RADIUS server redundancy and access sequence

To prevent authentication interruption, it is common practice to configure more than one RADIUS server. When identifying RADIUS servers to the switch, server group order (and server order within the group), determines server access order.


When defining the server access sequence for authentication with aaa authentication login default, there is an implied local included as the last item in the list. If no RADIUS server can be reached, local authentication will be attempted.