Custom Message when User Failed Login to Switch via TACACS+

[Arie --]

Hi,

I'm wondering if Cisco ISE 2.3 can configure custom message when a user failed login to Cisco switch, for example, can show a message like 'Your username is not in our database'. in CLI The Cisco switch is using TACACS+ for AAA.

Thank you

Arie

[agrissimanis · Accepted solution]

I believe it is not possible to send custom failure reason messages from ISE to the switch and display them to the user. You can use "aaa authentication fail-message" command locally on the switch to display a predefined message when authentication fails.

[Arie --]

Hi,

Noted that.

Thank you for the answer