Hi Team,
We created some local account for this switch but we unable to login when the TACACS Server down.
Please check the below config to verify and let me know is there any config issue.
3750 Switch
aaa group server tacacs+ ACS
server x.x.x.x
server x.x.x.x
ip vrf forwarding Mgmt
ip tacacs source-interface GigabitEthernet0
!
aaa authentication login default group ACS local
aaa authentication login console group ACS local
aaa authorization console
aaa authorization exec default group ACS local
aaa authorization exec console if-authenticated
aaa authorization commands 1 default group ACS local
aaa authorization commands 15 default group ACS local
----------
username xxxx privilege 15 password 7 xxx
username xxxxx privilege 15 password 7 xxxx
username xxxxx privilege 15 password 7 xxxx
username xxxxxx privilege 15 password 7 xxxx
username xxxxxx privilege 15 password 7 xxxx
username xxxxxx privilege 15 password 7 xxxx
username admin privilege 15 secret 4 xxxx
---------
tacacs-server host x.x.x.x key 7 xxxxxxx
tacacs-server host x.x.x.x key 7 xxxxxxx
tacacs-server directed-request
!
--------------
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password 7 xxxxxx
transport input ssh
line vty 5 15
transport input ssh
!
end
-----------------------------------------------------------------------------
interface GigabitEthernet0
vrf forwarding Mgmt
ip address x.x.x.x 255.255.254.0
speed 100
no negotiation auto
end
Thanks & Regards,
Kannan
