topic Re: Cisco Secure TACACS replication failing in Network Access Control https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665517#M421721 <HTML><HEAD></HEAD><BODY><P>Sounds like a key (secret_value) mismatch between the PIX and the CS server.</P><P></P></BODY></HTML> Sat, 10 Feb 2007 00:36:17 GMT kirk.mihalkovitz 2007-02-10T00:36:17Z Cisco Secure TACACS replication failing https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665516#M421720 <P>Hi, since we upgraded our pix to version 7 tacacs replication has been failing with a 'server not responding message'. Nothing has changed on the servers and they I see a connection on port 2000 made through the firewall which is active for 5mins (the timeout set on the server). Can anyone help with ideas for troublshooting please</P><P>thanks</P><P>Nicky</P> Sun, 10 Mar 2019 21:58:44 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665516#M421720 nickyh_is 2019-03-10T21:58:44Z Re: Cisco Secure TACACS replication failing https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665517#M421721 <HTML><HEAD></HEAD><BODY><P>Sounds like a key (secret_value) mismatch between the PIX and the CS server.</P><P></P></BODY></HTML> Sat, 10 Feb 2007 00:36:17 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665517#M421721 kirk.mihalkovitz 2007-02-10T00:36:17Z Re: Cisco Secure TACACS replication failing https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665518#M421722 <HTML><HEAD></HEAD><BODY><P>Thanks but the key hasnt chnaged and it doesn't give any message about the key failing ?</P></BODY></HTML> Mon, 12 Feb 2007 16:38:05 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665518#M421722 nickyh_is 2007-02-12T16:38:05Z Re: Cisco Secure TACACS replication failing https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665519#M421723 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>On Pix 7.x skinny inspection is enabled by default. Skinny inspection will break ACS replication since it uses port 2000 also.</P><P></P><P>Disable skinny inspection from any policy map which is applied on pix.</P><P></P><P>Regards,</P><P>Vivek</P><P></P></BODY></HTML> Tue, 13 Feb 2007 14:52:26 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-tacacs-replication-failing/m-p/665519#M421723 Vivek Santuka 2007-02-13T14:52:26Z