TACACS authentication for PIX OS v6.2.2

[kendyll]

I was told that the version of PIX OS (6.6.2) did not support a backup or secondary method for authentication when TACACS is used. Meaning that if the TACACS server was unavailable logging in was nearly impossible.

Is this true and if so does v6.3 support a secondary

authentication method if the TACACS server is unavailable.

Thanks

[scoclayton]

Hi,

You were told correctly. There currently is no configurable backup authentication method on the PIX. PIX 6.3 did not make any changes to resolve this limitation. This is something that we are considering for a future release but nothing has been committed to this point that I am aware of. As an aside, you can always use "pix" and the enable password as a backup login should the AAA server not be available. Hope this helps.

Scott