Completion of constraints code, not fully tested.
Configure AAA Server hostname, instead of expecting an IP address.