topic Re: IOS AAA Authentication not working in Network Access Control

IOS AAA Authentication not working

altaf.shah — Mon, 11 Mar 2019 00:43:25 GMT

Hi,

Can some body help me out solving this issue.

I have cisco 3800 configured for tacacs+ authentication.

below is the config.

========================================..

aaa group server tacacs+ CSCS

server 172.17.17.10

aaa authentication login default group tacacs+ enable

aaa authentication login console none

aaa accounting exec default start-stop grou CSCS

aaa session-d common

ip tacacs source-interface FastEthernet0/0

tacacs-server host 172.17.17.10 key """"""

line vty 0 4

exec-timeout 60 0

privilege level 15

password PASSWORD

logging synchronous

transport input telnet ssh

========================================..

in ACS server the error message it is showing in Authen-Failure-Code = key Mismatch

So now only local authentication is working

Any HELP?

cadet alain — Mon, 17 Jan 2011 08:48:00 GMT

Hi,

in ACS server the error message it is showing in Authen-Failure-Code = key Mismatch

tacacs-server host 172.17.17.10 key """"""

You have different keys configured on ACS and router/switch

Regards.

Alain.

altaf.shah — Mon, 17 Jan 2011 09:52:55 GMT

Hi.

Keys i tried to change many times. Same on Router/ACS

but still not working.!

cadet alain — Mon, 17 Jan 2011 15:18:57 GMT

Hi,

do a debug aaa authentication while trying to authenticate and post output here

Regards.

Alain.