Specifications

3-408
Cisco Wide Area Application Services Command Reference
OL-16451-01
Chapter 3 CLI Commands
(config) authentication fail-over
(config) authentication fail-over
To specify authentication failover if the primary authentication server is unreachable, use the
authentication fail-over global configuration mode command. To selectively disable options, use the
no form of this command.
authentication fail-over server-unreachable
no authentication fail-over server-unreachable
Syntax Description
Defaults The local authentication method is enabled by default.
Command Modes global configuration
Device Modes application-accelerator
central-manager
Usage Guidelines The authentication command configures both the authentication and authorization methods that govern
login and configuration access to the WAAS device.
Note We strongly recommend that you use the WAAS Central Manager GUI instead of the WAAS CLI to
configure administrative login authentication and authorization for your WAAS devices, if possible. For
information about how to use the WAAS Central Manager GUI to centrally configure administrative
login authentication and authorization on a single WAE or group of WAEs, which are registered with a
WAAS Central Manager, see the Cisco Wide Area Application Services Configuration Guide.
The authentication login command determines whether the user has any level of permission to access
the WAAS device. The authentication configuration command authorizes the user with privileged
access (configuration access) to the WAAS device.
The authentication login local and the authentication configuration local commands use a local
database for authentication and authorization.
The authentication login tacacs and authentication configuration tacacs commands use a remote
TACACS+ server to determine the level of user access. The WAAS software supports only TACACS+
and not TACACS or Extended TACACS.
To configure TACACS+, use the authentication and tacacs commands. To enable TACACS+, use the
tacacs enable command. For more information on TACACS+ authentication, see the (config) tacacs
command.
The authentication login radius and authentication configuration radius commands use a remote
RADIUS server to determine the level of user access.
fail-over
server-unreachable
Specifies that the WAAS device is to query the secondary authentication
database if the primary authentication server is unreachable.