06-04-2018 07:58 AM - edited 03-21-2019 11:25 AM
Hello, I would like to know if there is a possibility to achieve similar behavior like on IOS devices. If the user is not found in the local database, then radius is used. This works on IOS devices (tested on ASR920 and ME3400), but not on SMB switches (tested on SW version 1.4.8.6, HW was SF300-24PP). Any experience with such setup/configuration?
!
aaa authentication login Telnet local radius
line telnet
login authentication Telnet
!
Best Regards,
P.
06-05-2018 09:02 AM
Hi,
My name is Iliya Gatsev from Cisco Technical Support Team.
I think it would be best if you could call our support line and open a support case.
https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html
Iliya Gatsev
Cisco STAC Network Engineer
Together we are the human network .:|:.:|:. CISCO
06-12-2018 07:06 AM
Hello Iliya,
I will be satisfied if you could confirm that the SMB AAA behavior is the expected behavior (no radius authentication after negative local authentication) and the IOS like AAA behavior would require an feature request.
Best Regards,
Peter
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide