Cisco CCNA (640-553) Security Training
Using the “aaa group server diameter” command
By Charles Ross CCNA - CCNP #CSCO10444244
In today’s article, I’m going to inform you about the Cisco IOS global configuration mode command named “aaa group server diameter”.
Network administrators (like you) use the “aaa group server diameter” command to group different Diameter server hosts into distinct lists and distinct methods.
In other words, CCNA’s (like you) use this command to select a subset of the configured server hosts and use them for a particular service.
Cisco, calls supported server hosts “Diameter server hosts”; and currently there are two types RADIUS server hosts, and TACACS+ server hosts; both types belong to a “group server”, and a “group server” is a list of RADIUS or TACACS+ server hosts. The router uses a “group server” and a “global server list”; a “global server list” is a “group server” of IP addresses, which are the IP addresses of the selected server hosts.
Below is the command’s syntax:
aaa group server diameter group-name
As you can see, the command is pretty straight forward; the group-name argument is used to name the group of servers.
Below is an example of the command being used:
Router>enable
Router#configure terminal
Router(config)#aaa new-model
Router(config)#aaa group server diameter diameter_group_1
Router(config-sg-radius)#server diameter_peer_1
Router(config-sg-radius)#server diameter_peer_2
Router(config-sg-radius)#end
Router#copy run start
In the example above, the Diameter server group named diameter_group_1 has two member servers (diameter_peer_1 and diameter_peer_2) configured as Diameter peers.
Note: If you don’t specify a value for the peer port, it will default to 3868.
And, just like mostly all Cisco IOS commands; you can use the word “no” in front of the command to remove (disable) the configured command; like you see below:
Router(config)#no aaa group server diameter diameter_group_1
By the way, if you decide to use the command, make sure your router(s) is running Cisco IOS 12.4(9)T or higher.
I hope this article was very informative and helped you quickly understand the usage of the aaa group server diameter command. If you need to learn more; I suggest you visit my website, (www.ccnaittechtips.com) were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.
To your success,
Charles Ross
CCNA- CCNP #CSCO10444244