aaa authentication

Configures the Authentication, Accounting, and Authorization (AAA) login sequence with TACACS+ primary and local auth secondary.

Syntax

aaa authentication login tacacs+ local-auth-fallback

no aaa authentication login tacacs+ local-authfallback

Command Default

Authenticates with the local database if this command is not run.

Parameters

login: Specifies the order of login authentication sources for login
tacacs+: Specifies the use of TACACS+ servers
local-auth-fallback: Specifies the use of a local switch database if authentication methods are not active or authentication fails.

Modes

Config mode

Usage Guidelines

This command is allowed only in configuration mode.

This command is available only to users with the admin role.

Examples

The following example configures the authentication sequence to first use a TACACS+ server, then to use the fallback database if TACACS+ authentication is not active or fails.

device# configure terminal
device(config)# aaa authentication login tacacs+ local-auth-fallback

The following example removes the authentication sequence from the TACACS+ server and defaults to local database authentication.

device(config)# no aaa authentication login tacacs+ local-auth-fallback