VPN Authentication Fallback

Hi Folks,

I've read that administrators can be setup to be authenticated via RADIUS and use the local db as a fallback if the RADIUS server does not respond or is down.

Can that be used also for VPN users (IPSEC & SSL)? If so, any link to some docs or howtos would be appreciated.

Thanks,

Erick P.