AAA

[liram2307]

Hi, in my packet tracer im trying to make aaa authentication + ssh/telnet. 
i have a big project, 3 branches, bgp , asa and so on..
in one branch it works good but in another branch it doesnt work correctly as it should be, i'v tried everything i know, but it doesnt recognize the aaa users and not even the local ones.. i can ping the aaa server. 

in the pkt.file, its "סניף אילת" which is the right one between the 3 branches  (clusters). 

the middle branch "סניף חיפה" is working as it should. 

[Flavio Miranda]

@liram2307 

Which device are you trying to access using ssh and from what PC? 

[liram2307]

Hi, forgot to mention it. from router RB-C-ELT, through the gig0/0 (tried loopback 0), and from any pc in the branch. 

[Flavio Miranda]

I dont see any tacacs configuration on the router. Not sure if I am looking the right place. 

https://www.cisco.com/c/pt_br/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/10368-basictacacs.html

[liram2307]

oops, sry wrong pkt file, here is the updated one. 
and here is an img shows what router + server

[Flavio Miranda]

@liram2307 

  One problem I saw is that you have 10.1.1.254 on both routers, this can cause problem when tacacs server will reply. 

 But, this is not enough to make it work.  There is something else and I could not identify. This configuration is pretty straitforwad and yours is pretty much ok. I am wondering is there is any issue if the router or the packetrracer for this particular config. You may want to test in a small topology with another router model just to make sure. 

[liram2307]

hi, i somehow made it work.. i just did it over and over again and it works now.. i dont know why it didnt work before but as long as it works i will not touch it, hehe. thanks for the help anyways! have a wonderful day!

[zsgbrt4]

Check AAA configs on סניף אילת:

1. Ensure correct AAA authentication method (aaa authentication login default group radius local).
2. Verify radius server settings (IP, shared secret, ports). Spotify MOD
3. Confirm VTY line authentication (login authentication default).
4. Check routing/firewall rules between the branch and AAA server.

Since סניף חיפה works, compare its configuration with סניף אילת to spot differences. Let me know if you need further debugging steps!

[liram2307]

hi, i'v managed to make it work as i wrote before. ty for your time!