aaa authentication login default group radius local

[mooney1111]

Hi Guys.

I'm looking for some clarification, recently installed windows radius server to use with core and access switches in my network. having some issues with the 2nd method i.e local, the initial login using the radius method however if i try to login in using the local database my authentication is refused. any thoughts?

[Rob Ingram]

Hi,
You can only login using "local" if the radius server(s) are unreachable

HTH

[mooney1111]

Yes true, i believe that to test this theory i may have to shutdown the radius server and try the authentication again?

[Rob Ingram]

Yes, you need to make sure the switch knows the radius server is down/dead. Use "show aaa servers" to confirm the status.

This global command "radius-server dead-criteria time 5 tries 3" might be useful

[mooney1111]

Yes, Luckily for myself we only have a one radius server, i will test tomorrow, thanks for the commands