We’re setting up AAA on 2 nexus 5ks. At present, they are configured to authenticate against tacacs first, which if unavailable they will fall back on local authentication.
aaa authentication login default group (companyname) local
What we’re trying to achieve is to get them to try local first – is this possible? Tried various reshuffles of the command i.e putting local before group name but not having any luck.
I’ve searched a lot for this, may be missing it but figured I’d post a rare question myself to seek some advice.
Thanks very much
Solved! Go to Solution.
Can you post the configuration you tried? At least it works on IOS the way you mentioned it. But I don't know if it's also implemented that way in NX-OS.