<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:48" />
    <title>Configuring Fallback Mechanism for Authentication </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1594;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1073535"> </a><h1 class="pTitle">
Configuring Fallback Mechanism for Authentication

</h1>
<a name="wp1073536"> </a><p class="pBody">
You can enable or disable fallback to the local database in case the remote authentication is set and all 
of the AAA servers are unreachable (authentication error). The fallback is set to local by default in case 
of an authentication error. You can disable this fallback for both console and SSH or Telnet login. 
Disabling this fallback tightens the authentication security.

</p>
<a name="wp1221512"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1268036"> </a><p class="pBody">
To configure the fallback mechanism, follow this step:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1268037"> </a><li class="pSmartList1">Enter the <span style="font-weight: bold">show run aaa all</span> command to verify that the default fallback is enabled for both the default 
and console login.
</li>
<a name="wp1268038"> </a><p class="pListBodyLevel1">
Disabling fallback will print a warning message.

</p>
<a name="wp1073573"> </a><p class="pCaution">
<table border="0">
<tr>
<td>
<strong>Caution	&nbsp;&nbsp;&nbsp;</strong>
</td>
<td>
<p>If fallback is disabled for both the default and console, remote authentication is enabled and servers are 
unreachable and then the switch will be locked.
</p>
</td>
</tr>
</table>

</p>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
