RADIUS + Local authentication

[scolombo]

I've the following problem.

I'm trying to configure a RADIUS + local authentication for both telnet and dial-in access.

So I've configured the router with the following lines

aaa new-model

aaa authentication login default radius local

aaa authentication ppp default radius local

When I try to telnet to the router I've been asked for a user and password

I provide a local username and password but the router checks only against the Radius server and fails to authenticate the local user .

What I'm Missing ?

Thanks

Stefano Colombo

[Richard Burts]

The local authentication will only be done if the router is not able to communicate with the radius server. If the router sends an authentication request to radius and gets back a pass or a fail then it will not try any more. Only if it tries to send an authentication request and gets no response or a response of unable to process will it try the local authentication.

HTH

Rick

[djoconnor]

try it the other way around

ie I have

aaa group server radius rad_vty

server n.n.n.n auth-port 1645 acct-port 1646

aaa authentication login default local group rad_vty

(You might also need an aaa authorization exec default local group rad_vty)