cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
8950
Views
0
Helpful
1
Replies

Receive error message %TAC+: no address for get_server after my switch is rebooted

eraser34987
Level 1
Level 1

I'm trying get TACACS working on a Catalyst 3650 with IOS Version 15.0(1)SE2, RELEASE SOFTWARE (fc3). I believe my AAA model is defined correctly since it doesn't work properly until the switch is rebooted then I have to remove the TACACS server group and add it back in in order to get it to work. I can still logon via SSH but authorization fails when I try enter any commands under the privileged  exec mode which tells me the authentication piece is still working but the authorization step fails. I confirmed it in ACS as well. Below is my config hope someone has an idea on how to resolve this issue thanks for the help.

aaa group server tacacs+ X
server name auth1
server name auth2

aaa authentication login default local
aaa authentication login TacLogin group X local
aaa authorization console
aaa authorization config-commands
aaa authorization exec default local
aaa authorization exec TacAuth group X local
aaa authorization commands 0 default local
aaa authorization commands 0 TacCommands0 group X local
aaa authorization commands 1 default local
aaa authorization commands 1 TacCommands1 group X local
aaa authorization commands 15 default local
aaa authorization commands 15 TacCommands15 group X local
aaa accounting exec default start-stop group X
aaa accounting commands 15 default start-stop group X


ip tacacs source-interface VlanXXX

!
tacacs server auth1
address ipv4 xxx.xxx.xxx.xxx
key 7 xxxxx
timeout 5
tacacs server auth2
address ipv4 xxx.xxx.xxx.xxx
key 7 xxxxx
timeout 5

1 Reply 1

Tarik Admani
VIP Alumni
VIP Alumni

Dustin,

Did you upgrade the code on this switch or is this how you received it? I know the tacacs configuration has change slightly but can you remove the tacacs servers and enter them in this way:

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/15.0_1_se/configuration/guide/swauthen.html#wp1020721

Keep the groups just as you have them but enter the tacacs server configuration as the guide states and see if the issue presists.

thanks,

Tarik Admani