tacacs+ fail safe

[sheddsj]

Does anyone know how to configure a 2900 switch with tacacs+ authentication security to fall over to basic IOS authentication if the tacacs+ server is down or not available?

Basically, I want tacacs+ authentication security on every devices in the enterprise but I do not want to loose the ability to log into the device if the tacacs+ server is ever down or not available.

[bourse]

Use something like aaa authentication login default tacacs+ local

This tells the IOS to use TACACS+, but if no answer from TACACS+ then it will use the local database. You can populate the local database with the "username xxxxxxx password xxxxx" command. Hope this helps!