Can tacacs be configured as fallback to LOCAL in aaa

[suryaprakash.m.r]

I would like to know if it is possible to configure LOCAL database as the primary login method when the user account is not available in the database it could try authenticating with the Tacacs? if so what is command.

This is required on PIX 6.3

[Patrick Moubarak · Accepted solution]

If the user is not found, authentication simply fails and doesn't fall back to the next method... fallback is for when the authentication method does not receive a reply from the server (usually for RADIUS/TACACS not responding then try LOCAL; not the other way around)

Patrick

[Julio Carvajal · Accepted solution]

Hello,

Just do add.

Here is the example:

pixfirewall(config)# aaa authentication ssh console LOCAL ?

configure mode commands/options:

When using the local database as the first option, no other option available

But when using any other database

pixfirewall(config)# aaa authentication ssh console RADIUS ?

configure mode commands/options:

  LOCAL  If all servers in the server group have been deactivated,

         authentication will be done against the local database

So I think that answers your question right?

Regards

Jcarvaja

follow me on http://laguiadelnetworking.com

[suryaprakash.m.r]

Thanks for the responses, i got it sorted for the internal.