topic Re: AAA and local user authentication in Network Access Control

AAA and local user authentication

ismailfayaz — Mon, 11 Mar 2019 04:10:03 GMT

Hi,

I already have AAA authentication setup on my switch. And I can use local users to login when the AAA server is unreachable.

But I want to know if it is possible to use local users even when the AAA server is reachable. Something like first it checks the local users databse and if the user does not exists then fallback to AAA or vice versa.

Thanks.

AAA and local user authentication

parsahoo — Mon, 09 Dec 2013 05:28:25 GMT

Ismail, the authentication method you define act as a service. So only when the service is not avilable the method fallback to the next methond you define.

So in your case if the user account is not present in the local data base it will not fallback to aaa server.

aaa authentication login default local group radius

The same holds true if the user account is not there in the aaa server

aaa authentication login default group radius local

Only when the aaa server is not responding (service downe or not reachable) it will fallback to the local database.

Hope this helps!

Re: AAA and local user authentication

edwjames — Mon, 09 Dec 2013 11:02:17 GMT

Ismail,

This is your answer:

aaa authentication login default local group radius/tacacs

Parthapratim - A little correction,it will go to radius or tacacs + if the user is not present locally.

The local DB differs in the way fallback works which is the exception.

**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**

Please Rate if helpful.
Regards
Ed

AAA and local user authentication

ismailfayaz — Mon, 09 Dec 2013 11:49:22 GMT

Edward,

Thanks for your reply.

It works perfectly.