Cisco login RADIUS and Local

Pete Bauer · ‎01-12-2017

Can someone provide instruction on how to setup RADIUS and local login on a Cisco switch?

I've got RADIUS setup on a test switch and that's working fine however I cannot get it to honor any local creds on the switch itself.

Any help would be great.

username pete privilege 15 password 0 petetest

aaa new-model

aaa group server radius MIRADIUS
server-private 192.168.0.1 auth-port 1845 acct-port 1846 key testkey123

aaa authentication login default group MIRADIUS
aaa authorization exec default group MIRADIUS

aaa session-id common

line con 0
line vty 0 4
length 0
transport input ssh
line vty 5 15

Karsten Iwen · ‎01-12-2017

You need to configure a fallback-method in your aaa-statements. The order depends on what you want:

1) the local user-DB should be used if the RADIUS-server is not available:

aaa authentication login default group radius local

2) you want that both the local and the RADIUS-accounts can be used:

aaa authentication login default local group radius

dsantana · ‎04-05-2018

Hello Karsten, do you by any chance know how that second command translates to a NXS platform, specifically Cisco Nexus 9k?

Thank you!

michael.c.dorsch · ‎03-16-2022

This really help me. Thank you so much.