06-04-2010 08:39 AM - edited 03-10-2019 05:10 PM
Is there an equivalent of aaa local-override for the ASA? I would like to have local accounts work on my ASA even if the tacacs server is operational.
Thanks, gary
Solved! Go to Solution.
06-04-2010 10:00 AM
06-04-2010 10:00 AM
Unfortunately not.
PK
06-04-2010 10:51 AM
Thanks and it is "unfortunate"
06-04-2010 10:28 AM
aaa authentication local-override command is used on an individual interface to force the IOS to check the local database before attempting any other form of authentication keeping that in mind Cisco didn't introduce a similar command for firewall.
You may use local authentication for one session like telnet and tacacs and local both for other like SSH.
Regds,
JK
Do rate helpful posts-
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide