Secondary Authentication on ASA 5520

Posted on 2009-04-23
Last Modified: 2013-11-16

I would like to know if we could get RADIUS authentication on SSH into the ASA 5520 to failover to local user accounts if the RADIUS server rejects the user request or it i snot available. We need to do this so that configurations can be automatically backed up and checked every day for changes using our SolarWinds console.

I seem to recall that we can configure each type of access, e.g. console, ssh, telnet for one type of authentication without failover.

Any help would be greatly appreciated!
Question by:ebreiss
    1 Comment
    LVL 79

    Accepted Solution

    Yes, you can select to use LOCAL if the authentication server cannot be reached.
    In the ASDM, Device Management | Users/AAA | AAA Access
    Authentication tab.
    Select SSH and server group for Radius and check the box "use local when server group fails"
    Or from command line:
      aaa authentication ssh console <radius grou> LOCAL

    Note: it works best if your LOCAL username/password is the same as on the domain

    Featured Post

    Courses: Start Training Online With Pros, Today

    Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

    Join & Write a Comment

    Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now