If you have multiple authentication tools that can be used for authentication, you can determine the order in which each tool is used to authenticate users against the appliance. For example, if you have an external LDAP server authenticating users, you can set the order to authenticate users first with LDAP, and then locally on the appliance itself.
The order of the tools used is based on the sequence of tools added to the aaa authentication login default command.
Admin access
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
To specify the authentication tool order, use the following command:
aaa authentication login default <first> <second>...For example, if you want to set the authentication order to first authenticate against an LDAP server, second authenticate against a RADIUS server, and finally locally on the appliance, enter the following:
hostname # (config) aaa authentication login default ldap radius local