Cisco ISE - Tacacs+ failed to authenticate

[Scott12]

Hello everyone,

I have deployed the TACACS+ authentication on 75 ASAs whose models are 5505, 5506, 5508 5512, 5516.
TACACs server is executing under Cisco ISE 2.3 and the offices are connected through a site to site vpn, however we are facing some issue when trying to authenticate our domain account, the ASAs reject the username and password and we have to use the local account to be able to log in.
The offices have connectivity with the Cisco ISE at all times and the vpns tunnels are up.

Any thoughts?

Cheers

SJ

[balaji.bandi]

is this device authentication, Post the one of the device configuration. what you see ISE Live Logs when user try to login ?

is the ISE IP address part of VPN intresting traffic, it is good to have one of the device show run config.

[thomas]

See How to Ask The Community for Help

No error messages.

No ISE LiveLog details.

No TACACS policy.