Normally use Tacacs+ authentication with an ACS server with fallback to Local if the Tacacs server is not reachable. We have a vendor which needs local access to the router for maintenance purposes and I've been looking for a way to use local authentication 1st and if the account being used to authenticate is not on the local db then use Tacacs+ ... Is this doable? I thought I had found a config a while back and tested it successfully but now I can't find it again....
Thanks
