Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses the local devices auth only?
I'd like to avoid the emergency backup user from having to time out to the remote auth server in the event the network is having issues.
Ideally, this could be over VTY as well as console.
emergencyUser doesn't have a remote auth account it's only a local account.
standardUser has only a remote auth account.
If the remote auth server is accessible standardUser and emergencyUser could log in to the device via SSH. standardUser would hit the remote auth server and the emergencyUser would auth to the local device.
If the remote auth server isn't accessible standardUser fails to login but emergencyUser can log in via SSH and/or console still.