Cisco Ccna (640-553) Security Exam Training: Using The Aaa Authorization Cache Filterserver Command

In today’s article, I’m going to inform you about the Cisco IOS global configuration mode command named “aaa authorization cache filterserver”.


Network administrators (like you) use the “aaa authorization cache filterserver” command to enable AAA authorization caches and also download Access Control List configurations from a RADIUS filter server.

In other words, CCNA’s (like you) use the command to enable the RADIUS ACL filter server.

Below is the command’s syntax:

aaa authorization cache filterserver default methodlist [methodlist2...]

Notice, that the command also uses the “default” keyword; it’s used to indicate a default authorization list(s). And, the “methodlist arguments (methodlist and methodlist2) are the aaa authorization cache filterserver methods, they can be anyone of these keywords:

group group-name – Use this method keyword, if you want to use a subset of RADIUS servers for authentication as defined by the aaa group server radius command.

local – Use this method keyword, if you want to use the router’s own local database for authorization caches and ACL configuration downloading.

none – Use this method keyword, if you want to have no authorization performed.

And, like with mostly all Cisco IOS commands; you can use the word “no” in front of the command to remove (disable) the configured command; like you see below:

Router(config)#no aaa authorization cache filterserver default

Also, if you decide to use the command, it does come with a few exceptions and they are:

• Named method-lists cannot be configured.
• Only one instance of this command can be configured.
• TACACS+ groups cannot be configured.

And, your router(s) must be running Cisco IOS 12.2(13)T or higher.

I hope this article was very informative and helped you quickly understand the usage of the aaa authorization cache filterserver command. If you need to learn more; I suggest you visit my website, were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.

To your success,

By: Charles E Ross

Article Directory: http://www.articledashboard.com

Charles Ross, CCNP #CSCO10444244 is the owner of Ittechtips.com; where you'll find free comprehensive information and videos on how to pass the CCNA (640-553) security exam. Sign-Up for "100 Free Videos" and, also learn more about the new "Cisco CCNA (640-553) Video Accelerated Training Course" at his website. www.ccnaittechtips.com