About remote AAA with TACACS+

Remote AAA provides the following for your Aruba switch:

Authentication using remote TACACS+ AAA servers.
Authorization using remote TACACS+ AAA servers, providing fine-grained command authorization. Optional user-defined local user groups with configured command authorization rules can be used to provide authorization fallback protection for when TACACS+ servers become temporarily unavailable.
Transmission of locally collected accounting information to remote TACACS+ servers.

NOTE:

For switches that support multiple management modules such as the Aruba 8400, all AAA functionality discussed only applies to the active management module. See also AAA on switches with multiple management modules in the High Availability Guide.