I cannot authenticate by the TACACS server, is there anything i should add/remove from the config. I can ping the TACACS server from this switch. Any inputs.
There might be several issues. The first thing that I would suggest is to look at the TACACS server, look in its logs and reports and verify if it sees the authentication request come in. If it sees the request come in, then how does it respond. Probably it is rejecting the request, and if so why? The answer is probably in the server logs and reports.
In my experience the most common issues in situations such as you describe are either the source address in the request from the Catalyst is not the address configured on the server, or the TACACS key configured on the switch is not the same as the key configured on the server.
There might be several issues. The first thing that I would suggest is to look at the TACACS server, look in its logs and reports and verify if it sees the authentication request come in. If it sees the request come in, then how does it respond. Probably it is rejecting the request, and if so why? The answer is probably in the server logs and reports.
In my experience the most common issues in situations such as you describe are either the source address in the request from the Catalyst is not the address configured on the server, or the TACACS key configured on the switch is not the same as the key configured on the server.
I just realized that there was a duplicate entry for that switch on the ACS server under network configuration. As soon as i edited the duplicate entry, the switch started to authenticate from the ACS server.
Regards
Faiz
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
