cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
727
Views
0
Helpful
2
Replies

AAA authentication first local then radius

filopeter
Level 1
Level 1

Hello, I would like to know if there is a possibility to achieve similar behavior like on IOS devices. If the user is not found in the local database, then radius is used. This works on IOS devices (tested on ASR920 and ME3400), but not on SMB switches (tested on SW version 1.4.8.6, HW was SF300-24PP). Any experience with such setup/configuration?
!
aaa authentication login Telnet local radius
line telnet
login authentication Telnet
!

Best Regards,

P.

2 Replies 2

Iliya Gatsev
Cisco Employee
Cisco Employee

Hi, 
My name is Iliya Gatsev from Cisco Technical Support Team.

I think it would be best if you could call our support line and open a support case.

 

https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html

 

Iliya Gatsev
Cisco STAC Network Engineer
Together we are the human network .:|:.:|:. CISCO

Hello Iliya,

I will be satisfied if you could confirm that the SMB AAA behavior is the expected behavior (no radius authentication after negative local authentication) and the IOS like AAA behavior would require an feature request.

Best Regards,

Peter