On my 3750 switch, I create:
#username local secret cisco
#line console 0
Then I telnet into the switch (via a terminal server).
I get prompt:
I type "local".
I do not even have a chance to type the password, and then I get:
% Login invalid
Anyone has seen this before?
My intention is that if there is no tacacs system configured, then I would automatically authenticate using the 'local' user and password 'cisco'.
If that's your intention, you should use aaa new-model instead.
aaa authentication login default group tacacs+ local
The 'login tacacs' procedure you have, does not have the failover mechanism provided on aaa new-model.