Is it possible to have a fallback for auth-proxy, such that when the ACS server is not contactable, the router authenticates the user by default and modifies the acl applied on the interface to allow the users traffic ?
AAA commands support a fallback with the following command, "aaa authentication login default group TACACS+ none" If I put the "none" and if the TACACS is not available it will directly allow the user access. Can this also be done with auth-proxy, if so can we also have the ACL changed dynamically on the router to allow traffic through if ACS is down ?
