Hello
I installed Cisco ISE 2.3 primary and secondary , ISE joined to AD and it is operational also secondary node is joined to primary successfully and it is operational too , all TACACS and dot1x configs are fine because I use these configs in another project and it works.
in this project ISE is installed in Datacenter Building and Network Devices located in another building (building 2) connecting by Fiber , from ISE I have the ping of all switches in building 2 and vice versa but TACACS and dot1x not work.I check TACACS shared key on both cisco switches and ISE many times and it was same, I attach my debugs from switch when I use this command: test aaa group tacacs username password
and at below I put my switch config for tacacs:
aaa new-model
tacacs server ISE-PRIMARY
address <ise ip add>
key <key>
timeout 3
!
!
aaa group server tacacs+ <name>
server name ISE-PRIMARY
ip tacacs source-interface <management VLAN>
!
aaa authentication login default group <group-name> local
aaa authentication enable default group <group-name> enable
aaa authorization config-commands
aaa authorization exec default group <group-name> local
aaa authorization commands 1 default group <group-name> local
aaa authorization commands 15 default group <group-name> local
aaa accounting exec default start-stop group <group-name>
aaa accounting commands 1 default start-stop group <group-name>
aaa accounting commands 15 default start-stop group <group-name>
aaa session-id common
