Differences between version 2 and previous revision of CiscoBestPractices.
Other diffs: Previous Major Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 2 | Last edited on Tuesday, September 14, 2004 10:38:35 am | by LindsayDruett | Revert |
| Older page: | version 1 | Last edited on Tuesday, September 14, 2004 10:07:46 am | by LindsayDruett | Revert |
@@ -59,7 +59,10 @@
aaa authentication login default group {tacacs+} {radius} local
This configuration will allow telnet (VTY) and console access without having to configure __line con0__, __line aux0__, or __line vty 0 x__. The alternative is to create passwords on each of those areas.
+Always a good idea to allow local login when allowing tacacs or radius login. If you don't allow local login and the radius or tacacs server either fails or can't be seen by the Cisco device, you will be locked out.
+
+----
----
CategoryBestPractices
