cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
configure & troubleshoot anyconnect
153
Views
0
Helpful
2
Replies
Beginner

AAA, possible to check local before tacacs group for authentication?

We’re setting up AAA on 2 nexus 5ks.  At present, they are configured to authenticate against tacacs first, which if unavailable they will fall back on local authentication.

aaa authentication login default group (companyname) local

What we’re trying to achieve is to get them to try local first – is this possible?  Tried various reshuffles of the command i.e putting local before group name but not having any luck.

I’ve searched a lot for this, may be missing it but figured I’d post a rare question myself to seek some advice.

 

Thanks very much

John

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: AAA, possible to check local before tacacs group for authentication?

This is not ISE related .

Please refer to other documentation or TAC.

2 REPLIES 2
VIP Mentor

Re: AAA, possible to check local before tacacs group for authentication?

Can you post the configuration you tried? At least it works on IOS the way you mentioned it. But I don't know if it's also implemented that way in NX-OS.

Highlighted
Cisco Employee

Re: AAA, possible to check local before tacacs group for authentication?

This is not ISE related .

Please refer to other documentation or TAC.