How to failover to local account on a cisco switch/router if radius server fails?
Posted
by 3d1l
on Super User
See other posts from Super User
or by 3d1l
Published on 2010-03-19T15:02:47Z
Indexed on
2010/03/19
15:11 UTC
Read the original article
Hit count: 279
cisco
|authentication
I have the following configuration on a switch that I testing for RADIUS authentication:
aaa new-model
aaa authenticaton login default group radius local
aaa authentication enable default group radius enable
aaa authorization exec default group radius local
enable secret 5 XXXXXXXXX
!
username admin secret 5 XXXXXXXXX
!
ip radius source-interface FastEthernet0/1
radius-server host XXX.XXX.XXX.XXX auth-port 1812 acct-port 1813 key XXXXXXXXX
radius-server retransmit 3
!
line con 0
line vty 5 15
Radius authentication is working just fine but if the server is not available I can not log into the router with the ADMIN account.
What's wrong there?
Thanks!
© Super User or respective owner