[c-nsp] Cisco VPN 3000 Concentrators login failback if TACACS is unreachable

Vincent gscisco at gmail.com
Fri Jul 21 17:14:46 EDT 2006


Indeed I think in a pix it is possible just like routers and switch but this
is a VPN concentrator and as for yet it does not seem possible ... which I
do find weird.


On 7/21/06, Laurent Geyer <lgeyer at 085zehn.com> wrote:
>
>
>
>  On 7/20/06, gscisco at xs4all.nl Cisco <gscisco at gmail.com> wrote:
> >
> >
> > Is there any way to override this behavior ? Or perhaps I'm overlooking
> > some
> > options. Because I don't want to run the risk to lose access to the
> > boxes if
> > anywhere in the chain to the tacacs server something happens.
>
>
> There is no way to override this behavior that I am aware off.
>
> If TACACS authentication becomes unavailable though you still have the
> option to authenticate remotely using the 'pix' username and the password
> defined by the 'password' configuration option.
>
> - Laurent
>
>
>
>
>
>


More information about the cisco-nsp mailing list