I know on the routers, when setting up the AAA, you should put "enable" at the end of the line that sets up the TACACS, in case you lose your network connectivity or the like.
aaa authentication login default tacacs+ enable That way when TACACS isn't available it will rollover to the enable password for access. Otherwise you may have to do a password recovery........ http://www.cisco.com/warp/public/474/ Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=24974&t=24969 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]