That is what I did and everything camr back up,

the reason I had to do that though is that I removed and existing switch 6509 that had been in the list and now it is rejecting authentication.

everything is as it was before but now I can get in, my account is ok because I can get into other devices.

Is there any where I can find the reson for the rejection?

If you removed the switch, I assume you re-added it, and included the correct IP address (I usually add all IPs from my devices just to be on the safe side). Make sure you specify the correct TACACS+ key when you do. Note: the key you see in the GUI may not be the real key, so make sure you enter the clear text key value correctly.

See Reports and Activities > Failed Attempts for the reason why your login is being rejected.

Is there somewhere on the TACACS server that shows the clear text key?

I re-entered the same key in the other switches with no problem.

By the way, I appreciate your replys

I'm not sure if there is a guaranteed way to see the clear text keys in ACS. But, if you have LMS, you can look at the config in the archives to find the key. You could also use LMS to do disable aaa new-model if you need to login to the switch quickly.

I have it now J, I appreciate all of your help.

You have helped me in that past.

The ACS was expecting the authentication request from an IP Address that was not defined in the client list.

I put in wildcards for now, so I can relax over the weekend.

Thanks for your knowledge and thank God for this forum. Man, the things you learn here.

You don't know how much guys like me appreciate it.