[a-nsp] Console only local login user or better way to do this?

[Drew Weaver]

Hi,

We use tacacs+ and/or SSH keys for regular access to configure infrastructure as is tradition.

We wanted to see if there was a way to configure a local account just for con0 access to the switch.

Not only just in the event that the tacacs+ infrastructure becomes unavailable (I believe our configuration falls back to local anyway)

But sometimes we are making changes to things that it would be really nice to have console access to the switch prior to a potentially breaking change.

I found this article which seems to attempt to describe how to achieve using the local database only for console access which seems like what I want.

https://arista.my.site.com/AristaCommunity/s/article/Configure-Restricted-Local-User-To-Exec-Prompt

However I just cannot seem to get it to work following the example.

Does anyone have a working configuration whereby logins on Con0 will be processed locally?

Thanks in advance.
-Drew


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/arista-nsp/attachments/20260710/87c50540/attachment.html>