Enable password wont work after TACACS+ implemented

[Skyglider49]

Hello everyone,

I have a problem. I have Cisco ASA firewall in the production. I was able to login to it using ssh access via a Linux server that we are using. Then I implemented TACACS+ on the device. Access via TACACS+ won't work, and now when I access via same Linux server, using ssh, enable password won't work anymore.  

So, do you know maybe how I can overcome this ?  

I would appreciate any help.

Thank you!

[balaji.bandi · Accepted solution]

If you have configured fallback with a Local account your TACACS configuration - then you have a good day.

If you have not configured a fallback Local account if TACACS not reachable and Configuration saved and Logged out - then you Locked now.

Please confirm which condition are you in now?

[poongarg · Accepted solution]

Please review below link to check the behavior of login authentication on ASA:

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/215792-analyze-aaa-device-administration-behavi.html

HTH