06-04-2010 08:39 AM - edited 03-10-2019 05:10 PM
Is there an equivalent of aaa local-override for the ASA? I would like to have local accounts work on my ASA even if the tacacs server is operational.
Thanks, gary
Solved! Go to Solution.
06-04-2010 10:00 AM
06-04-2010 10:00 AM
Unfortunately not.
PK
06-04-2010 10:51 AM
Thanks and it is "unfortunate"
06-04-2010 10:28 AM
aaa authentication local-override command is used on an individual interface to force the IOS to check the local database before attempting any other form of authentication keeping that in mind Cisco didn't introduce a similar command for firewall.
You may use local authentication for one session like telnet and tacacs and local both for other like SSH.
Regds,
JK
Do rate helpful posts-
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: