AAA, possible to check local before tacacs group for authentication?

[JBrady162]

We’re setting up AAA on 2 nexus 5ks.  At present, they are configured to authenticate against tacacs first, which if unavailable they will fall back on local authentication.

aaa authentication login default group (companyname) local

What we’re trying to achieve is to get them to try local first – is this possible?  Tried various reshuffles of the command i.e putting local before group name but not having any luck.

I’ve searched a lot for this, may be missing it but figured I’d post a rare question myself to seek some advice.

Thanks very much

John

[Karsten Iwen]

Can you post the configuration you tried? At least it works on IOS the way you mentioned it. But I don't know if it's also implemented that way in NX-OS.

[ldanny · Accepted solution]

This is not ISE related .

Please refer to other documentation or TAC.