A network engineer configures AAA on a Catalyst switch to authenticate administrative logins against a RADIUS server. During a maintenance window the RADIUS server becomes unreachable, and the engineer is now completely locked out of the console and VTY lines even though a local username exists. The relevant configuration is: 'aaa authentication login default group radius'. Which change ensures the engineer can still log in with the local database when RADIUS is unreachable?