The TACACS+ Lockout That Taught Me Three Things About IOS-XE AAA
How I locked myself out of a Cisco router with TACACS+, why IOS-XE does not fall through on STATUS_FAIL, and the safe AAA chain pattern that fixes it.
Posts tagged: Postmortem
Posts tagged: Postmortem
How I locked myself out of a Cisco router with TACACS+, why IOS-XE does not fall through on STATUS_FAIL, and the safe AAA chain pattern that fixes it.