While it is possible to store all of this information locally on the router, if you have a large Router1(config)#aaa authentication login default group tacacs+ .