Understanding Fallback Options For Acs Mode - Cisco CISCOWORKS COMMON SERVICES 3.0 User Manual

Chapter 3 Configuring the Server

Understanding Fallback Options for ACS Mode

Step 1
Step 2
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
78-16571-01
Fallback option in ACS mode is different from Non-ACS mode. Here, fallback is
provided only for authentication. If authentication with ACS fails, authentication
is tried with CiscoWorks local mode.
If it succeeds, you are allowed to change the login module to Non-ACS mode,
provided you have permission to do that operation in Non-ACS mode. You will
not be allowed to login if the authentication fails in CiscoWorks local mode.
If you log in using fallback mode, you will be presented with a dialog box with
instructions to change the login mode to CiscoWorks local.
To change the login mode:
Go to Common Services > Server > Security > AAA Mode Setup >
CiscoWorks Local.
Click Change.
You need to have proper permission to change the login mode. Otherwise the
Change button will be disabled.
To add the fallback users in ACS, the admin should:
Select Non-ACS mode.
Select Tacacs+ and click Change.
Specify the fallback users in Login fallback options field.
Click OK.
Select ACS mode.
Enter the required values. See
page 3-35, for details.
Click Apply.
Setting the Login Module to ACS
"Setting the Login Module to ACS" section on
User Guide for CiscoWorks Common Services
3-43