Cisco Ccna (640-553) Security Exam Training: Using The Aaa Cache Filter Command

In today’s article, I’m going to quickly inform you about the Cisco IOS global configuration mode command named “aaa cache filter”.


Network administrators (like you) use the “aaa cache filter” command to enable filter cache configuration.

In other words, CCNA’s use the command to start filter cache configuration on a router; and once the command is typed, it places the router into AAA filter configuration mode Router(config-aaa-filter)#.

Below is the command’s syntax:

aaa cache filter

As you can see, the command is extremely easy to implement, because it doesn’t use any keywords or arguments.

But, when the router is in AAA filter configuration mode (config-aaa-filter), you can use the following optional commands to configure specific cache parameters:

• cache clear age—Specifies, in minutes, when cache entries expire and the cache is cleared.
• cache disable—Disables the cache.
• cache max—Refreshes a cache entry when a new sessions begins.
• cache refresh—Limits the absolute number of entries the cache can maintain for a particular server.
• password—Specifies the optional password that is to be used for filter server authentication requests.

Below is an example of the command being configured on a router, along with some optional cache parameters:

Router>enable
Router#configure terminal
Router(config)#aaa cache filter
Router(config-aaa-filter)#password ittechtips
Router(config-aaa-filter)#no cache refresh
Router(config-aaa-filter)#cache max 100
Router(config-aaa-filter)#end
Router#copy run start

And, just like mostly all Cisco IOS commands; you can use the word “no” in front of the command to remove (disable) the configured command; like you see below:

Router(config)#no aaa cache filter

By the way, if you decide to use the command, make sure your router(s) is running Cisco IOS 12.2(13)T or higher.

I hope this article was very informative and helped you quickly understand the usage of the aaa cache filter command. If you need to learn more; I suggest you visit my website, were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.

To your success,

By: Charles E Ross

Article Directory: http://www.articledashboard.com

Charles Ross, CCNP #CSCO10444244 is the owner of Ittechtips.com; where you'll find free comprehensive information and videos on how to pass the CCNA (640-553) security exam. Sign-Up for "100 Free Videos" and, also learn more about the new "Cisco CCNA (640-553) Video Accelerated Training Course" at his website. www.ccnaittechtips.com