sysAuthPreference 1.3.6.1.4.1.529.9.10

An incoming call can be authenticated using a local profile or one from an authentication server such as RADIUS or TACACS. local-first means authenticate from a local profile first, and if that fails, try the authentication server. remote-first means get a profile from the authentication server and authenticate from that and if that fails, try to authenticate from a local profile. remote-no is the same as remote-first except if the external authentication server NACKs the request, then the connection will be denied, i.e. no search of the local profiles will be made.