cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1037
Views
0
Helpful
3
Replies

IOS AAA Authentication not working

altaf.shah
Level 1
Level 1

Hi,

Can some body help me out solving this issue.

I have cisco 3800 configured for tacacs+ authentication.

below is the config.

========================================..

aaa group server tacacs+ CSCS

server 172.17.17.10

aaa authentication login default group tacacs+ enable

aaa authentication login console none

aaa accounting exec default start-stop grou CSCS

aaa session-d common

ip tacacs source-interface FastEthernet0/0

tacacs-server host 172.17.17.10 key """"""

line vty  0 4

  exec-timeout 60 0

privilege level 15

password PASSWORD

logging synchronous

transport input telnet ssh

========================================..

in ACS server the error message it is showing in Authen-Failure-Code = key Mismatch

So now only local authentication is working

Any HELP?

3 Replies 3

cadet alain
VIP Alumni
VIP Alumni

Hi,

in ACS server the error message it is showing in Authen-Failure-Code = key Mismatch

tacacs-server host 172.17.17.10 key """"""

You have different keys configured on ACS and router/switch

Regards.

Alain.

Don't forget to rate helpful posts.

Hi.

Keys i tried to change many times. Same on Router/ACS

but still not working.!

Hi,

do a debug aaa authentication while trying to authenticate and post output here

Regards.

Alain.

Don't forget to rate helpful posts.