I am trying to use the config replace command to put a new configuration on a 3560 switch. The entire config takes except for the tacacs-server key. I'm consoled in during the config change over process and I see the line %Invalid encrypted key: for both the tacacs and radius server key hashes. However once the process is over radius comes up fine (computers can authenticate) but tacacs doesn't (no ssh access). In fact I don't even see the command "tacacs-server key" in the running config. I have tried entering the tacacs-server key as it appears in the running config with the "7" in front the encrypted password. If I use plain text or 0 then the value of the password changes its hashed value and I get a shared key mismatched error. Not sure what I'm doing wrong. Any help is appreciated. thanks.
