On 01/11/2010 19:55, Lee wrote: > At 2am all my managers are busy sleeping :) But regardless, doesn't > if-authenticated fix that horrible timeout wait? - ie: > aaa authorization exec default group tacacs+ if-authenticated It does, yes. But it also authorises anything if you're authenticated. You may not want this. Nick