Symptom
An invalid AAA methodlist configure is accpeted
Conditions
There are two way this issue can be reproduced.
Repro method 1:
- Commit replace 'aaa authentication login foo group tacacs+ group bar local line'. This line is individually invalid, and is not accepted.
- Commit replace 'aaa group server radius bar source-interface FH0/0/0/0', which is a valid line and applies successfully.
- Clear the running config so that there is no config present.
- Commit replace 'aaa authentication login foo group tacacs+ group bar local line' again. This is now accepted.
Repro method 2:
-Unconfigure an existing radius server group
-Add the above radius group to a aaa methodlist. Config will now be accepted even though the server group is non-existant.-
Workaround
This is a misconfiguration getting applied. The workaround is not to attempt the misconfiguration in the first place.