How to failover to local account on a cisco switch/router if radius server fails?
- by 3d1l
I have the following configuration on a switch that I testing for RADIUS authentication:
aaa new-model
aaa authenticaton login default group radius local
aaa authentication enable default group radius enable
aaa authorization exec default group radius local
enable secret 5 XXXXXXXXX
!
username admin secret 5 XXXXXXXXX
!
ip radius source-interface FastEthernet0/1
radius-server host XXX.XXX.XXX.XXX auth-port 1812 acct-port 1813 key XXXXXXXXX
radius-server retransmit 3
!
line con 0
line vty 5 15
Radius authentication is working just fine but if the server is not available I can not log into the router with the ADMIN account.
What's wrong there?
Thanks!