Forum Discussion

DarrellE_142273's avatar
DarrellE_142273
Icon for Nimbostratus rankNimbostratus
Mar 09, 2015

TACACS vs local users (admin and root)

Running 11.4.1   We implemented TACACS for administrative users and that part works fine, but when the TACACS servers are unreachable we are unable to login with local root or admin (console, ssh ...
BIG-IP Access Policy Manager (APM)
management
security
Pedro_Haoa's avatar
Pedro_Haoa
Ret. Employee
Mar 09, 2015

Hi,

 

By default, the BIG-IP system uses its own user directory for user authentication. If you configure a remote authentication method, such as LDAP, RADIUS, or TACACS, the system does not allow you to use local authentication as a backup method if remote authentication fails.

 

Please add more TACACS servers to avoid this or use local database instead.

 

More info here: https://support.f5.com/kb/en-us/solutions/public/13000/400/sol13456.html?sr=26331845