> # Remote Authentication Guidelines

> If you prefer using remote AAA servers, follow these guidelines:

> - A minimum of one AAA server should be IP reachable.
> - Be sure to configure a desired local AAA policy as this policy is used if all AAA servers are not reachable.
> - AAA servers are easily reachable if an overlay Ethernet LAN is attached to the switch (see the IP Services Configuration Guide, Cisco DCNM for SAN). We recommend this method.

> SAN networks connected to the switch should have at least one gateway switch connected to the Ethernet LAN reaching the AAA servers.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.