Hello,
I'm running ISE 2.3 and trying to get TACACS working with a Switch and an ASA. The license and NAD configuration all look good. A aaa radius test works from the switch, while the tacacs test is user rejected.
I don't see any ISE logs for TACACS.
I am able to ping the ISE node from the NAD's and have double checked the keys.
Switch configuration;
aaa group server tacacs+ ISE-TACACS
server name apollo-ise
!
aaa authentication login ISE-LOGIN group ISE-TACACS local
aaa authentication enable default group ISE-TACACS enable
aaa authorization console
aaa authorization config-commands
aaa authorization exec ISE-LOGIN group ISE-TACACS local if-authenticated
aaa accounting update newinfo
aaa accounting exec default start-stop group ISE-TACACS
aaa accounting commands 1 default start-stop group ISE-TACACS
aaa accounting commands 15 default start-stop group ISE-TACACS
!
ip tacacs source-interface Loopback0
!
tacacs server apollo-ise
address ipv4 10.0.0.101
key 7 03265A080D0B711C5C
timeout 2
!
line vty 0 4
exec-timeout 15 0
authorization exec ISE-LOGIN
logging synchronous
login authentication ISE-LOGIN
transport input ssh
Any help appreciated.
