On 05/06/2013 05:01, George Hong wrote: > My tacacs config should fall back to local authorization but that doesn't > seem to work. you possibly want "if-authenticated" rather than "local to handle tacacs+ server unavailability. Nick