It's also a good idea if you end up using tacacs or radius for aaa to configure AAA to use local as a last resort, that's where the username/password command can come in as a last resort if your tacacs/radius servers are unavailable. Just remember, your security is only as good as your passwords.
