On 11/1/10, Nick Hilliard <[email protected]> wrote: ... snip... > If you're using authorization, you'll also need to create a DR procedural > note to permit authorization to be disabled if the tacacs server is > completely unavailable, and to document how to do this on whatever device. > Otherwise you need to wait for a TCP timeout every time you issue a > command. This can be teeth-gnashingly frustrating when dealing with > service outages (i.e. think: 02:00am, tired, service down, can't browse > internet to check the exact command, your manager shouting at you, and to > top it all off, each command takes 20 seconds to execute).
At 2am all my managers are busy sleeping :) But regardless, doesn't if-authenticated fix that horrible timeout wait? - ie: aaa authorization exec default group tacacs+ if-authenticated Lee _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
