Radius Authentication to fail over to local Authentication

[philcisco2]

Hello,

I have an 881 doing SSL termination with radius setup to authentication against a windows server.

If the windows server goes down for a reboot or crash, anyway to set the router to fail over to local authentication?

Commands i am using now:

aaa authentication login radius_authen group radius local

Under my SSL config:

webvpn context xxx
  aaa authentication list radius_authen

Thanks,

[Poonam Garg]

what problem you are facing. This is the correct way of doing fallback authentication

[philcisco2]

Hello,

the problem is that this did happen today, server was down and i was able to log into the SSL Website with the local creds, but the anyconnect client failed to connect until i logged into the router and changed:

aaa authentication list local_authen

[Marvin Rhoads]

You configuration already has local as the fallback in the event that the radius server is unavailable. That will depend on having local usernames defined for the router to check against.