Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

cached token rejected/expired

Once I used a router (3660)for dail-in with ACS and RSA,then  I am going to take the 2611 over 3660,and the configure are basicly the same. But I can not dail-in with token,and on the ACS I found this message:cached token rejected/expired.However if I dial-in with the ACS local database I can dail-in succesfully.

Any one get this issue?

Sorry for my poor English.

aaa new-model

!

!

aaa authentication login default group tacacs+ local

aaa authentication ppp default group tacacs+ local

aaa authorization exec default group tacacs+ local

aaa authorization network default group tacacs+

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 0 default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

aaa accounting network default start-stop group tacacs+

aaa session-id common

ip subnet-zero

no ip source-route

no ip gratuitous-arps

ip cef

ip tcp synwait-time 10

!

interface Group-Async1

ip unnumbered Loopback0

encapsulation ppp

ip tcp header-compression

no ip mroute-cache

no logging event link-status

async default routing

async mode interactive

peer default ip address pool ipGroup-1

ppp authentication chap one-time

group-range 33 48

!

1 REPLY
New Member

cached token rejected/expired

I need your help

297
Views
0
Helpful
1
Replies
CreatePlease to create content