topic Mixed login in Cisco Router in Network Access Control

Mixed login in Cisco Router

walter.perera — Sun, 10 Mar 2019 23:37:45 GMT

Hi all:

I have configured Radius on all my network devices, but I need to enable mixed login (Radius and local) for only one of them (creating a local admin user)

Could someone help me?

Thanks!!

Re: Mixed login in Cisco Router

Jagdeep Gambhir — Tue, 04 Aug 2009 20:01:48 GMT

Here are the command

Router(config)# username [username] password [password]

radius-server host [ip]

radius-server key [key]

aaa new-model

aaa authentication login default group radius local

Request will first go to radius and if it is down then it will let you in using local credential.

Regards,

~JG

Do rate helpful posts

Re: Mixed login in Cisco Router

walter.perera — Tue, 04 Aug 2009 20:11:44 GMT

Hi JG

Thanks for your answer.

We have quite similar config:

aaa new-model

aaa group server radius RadiusServers

server [IP] auth-port [PORT1] acct-port [PORT2]

aaa authentication login default group RadiusServers local

aaa authentication enable default group RadiusServers enable

aaa session-id common

and when Radius is down, it works, but we want to create a local user on one of the routers and let them login not using Radius (the rest of the users will continue using Radius)

Hope it is clear.

Thanks

Re: Mixed login in Cisco Router

Jagdeep Gambhir — Tue, 04 Aug 2009 20:21:38 GMT

Walter,

In that case you need to use local first,

aaa authentication login default group local RadiusServers

Regards,

~JG

Do rate helpful posts

Re: Mixed login in Cisco Router

walter.perera — Wed, 05 Aug 2009 10:48:07 GMT

Hi JG:

Thanks for your post. It works!

Just a small change:

aaa authentication login default local group [RadiusServers]