Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

C2960 12.2(55)SE7 Tacacs, high CPU

I'm having problems with the 12.2(55)SE7 software when using Tacacs. It seems the CPU load is so high I am not able to log on to the switch. When I change the config, via SNMP, to use local userdatabase I can log on, but the CPU load is still very high. Some switches won't let me log in even if I change the AAA-config.

Reverting to 12.2(55)SE5 makes this problem go away, but the catch is - these switches are in remote locations and reloading them doesn't work either. They have to be power-cycled. The switch accepts the reload command, but doesn't reload. Trying the reload command again gives the following output:

hostname#reload

%Reload in progress

This issue is pretty annoying as switches are shipped with 12.2(55)SE7 and the people deploying them don't have the knowledge to swap IOS and if they did it would cost us a lot of money.

Any help on this would be greatly appreciated.

original tacacs config:

aaa authentication login default group tacacs+ local

aaa authentication login no_tacacs enable

aaa authorization exec default group tacacs+ if-authenticated

tacacs config that allows me to log in:

aaa authentication login default local

aaa authorization exec default local

show version:

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------

*    1 26    WS-C2960-24TT-L    12.2(55)SE7           C2960-LANBASEK9-M

hostname#sh processes cpu | inc TPLUS

225   747057978  29683876      25167 91.69% 92.28% 91.03%   0 TPLUS


Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

C2960 12.2(55)SE7 Tacacs, high CPU

You may be hitting CSCth68274 which was duped to CSCtf23298.

You could try changing the config from

tacacs-server host x.x.x.x single-connection

tacacs-server host x.x.x.x single-connection

to

tacacs-server host x.x.x.x

tacacs-server host x.x.x.x

Hope that helps

Luke

3 REPLIES
Cisco Employee

C2960 12.2(55)SE7 Tacacs, high CPU

You may be hitting CSCth68274 which was duped to CSCtf23298.

You could try changing the config from

tacacs-server host x.x.x.x single-connection

tacacs-server host x.x.x.x single-connection

to

tacacs-server host x.x.x.x

tacacs-server host x.x.x.x

Hope that helps

Luke

New Member

Re: C2960 12.2(55)SE7 Tacacs, high CPU

That helped tremendously!

Thanks, Luke/Richard..

Best regards

Simen Ringstad

New Member

C2960 12.2(55)SE7 Tacacs, high CPU

HI, I am facing the same issue, we removed the single-connection command, but issue remains.

Do I need to reload the switch after removing it, or I have to wait for some time?

Thanks, Anas *--* Please rate the useful post,its free ;) *--*
1075
Views
0
Helpful
3
Replies
CreatePlease login to create content