Forum Discussion

Simon_Thorgerse's avatar
Simon_Thorgerse
Icon for Nimbostratus rankNimbostratus
Oct 09, 2017

Tacas+ authentication

How is it possible to configure BIG-IP version 11.6.0 to choose a remote AAA login over the admin account I have configured. I want to be able to have the local admin account stil function should the remote AAA be down. As it is right now I am able to login both as admin and my tacacs+ active directory at the same time. I want BIG-IP to prioritize the remote AAA over the local admin account and only use the admin as a fallback account.

 

BIG-IP
devops
security
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Oct 09, 2017

    Hi,

    when working with remote authentication, all administrators authenticate against the configured servers except 

    admin
    account.

    admin
    account is always local to prevent authentication issues.

    In version 13, there is a new option 

    Fallback to Local
    to allow local fallback but admin user is still local only.