topic Re: Issues with TACACS authentication in Network Access Control

Issues with TACACS authentication

Mohd Khairul Nizam — Mon, 22 Jun 2020 08:28:07 GMT

i'm having issues with TACACS authentication,

What is the issues

Re: Issues with TACACS authentication

Rob Ingram — Sat, 07 Jul 2018 16:47:58 GMT

Hi,

With this error:-

*Mar 2 12:22:55.032: TAC+: received bad AUTHEN packet:

I'd say the shared secret was incorrect, check this is the same on the switch/router and on the ISE/ACS server, under the Network Device object.

HTH

Re: Issues with TACACS authentication

RicardoDiaz — Thu, 12 Jul 2018 16:13:59 GMT

Please verify shared secret

Invalid AUTHEN/START/LOGIN/ASCII packet (check keys)

Regards

Re: Issues with TACACS authentication

costaspal — Fri, 09 Nov 2018 15:34:03 GMT

Hi there
Pretty sure it's the key...
Don't start with a complex password, try something simple first, that worked for me !
Costas

Re: Issues with TACACS authentication

kthiruve — Mon, 12 Nov 2018 06:36:48 GMT

1. Please make sure you have used the correct protocol (PAP/CHAP).

2. Look at the ISE server TACACS logs and see what is going on. If ISE does not receive packets or drops packets then it could be wrong shared secret.

3. Make sure your TACACS+ auth policy is configured correctly. Use the correct username/password etc for authentication

Here is the latest guide uploaded that can help you.

https://community.cisco.com/t5/security-documents/cisco-ise-device-administration-prescriptive-deployment-guide/ta-p/3738365

-Krishnan

Re: Issues with TACACS authentication

thomas — Mon, 22 Jun 2020 15:12:19 GMT

Please read How to Ask The Community for Help in order to provide us with enough information to provide suggestions.

Otherwise you'll need to call TAC.