We have around 60 Cisco switches that we use RADIUS authentication and authorization on (Will be moving to TACACS+ in the next few months).  It works great, as long as the trunk back to the main network is up, if it (the trunk) fails for any reason I...