The problem with using the is that the router looks locally for a pool named AUX and when it does not find one - it will then try to download a pool from the TACACS+ server using the name of the router. However, if you were to change the line to this should not matter. Change this command and see if it works.