Secure ACS to control AAA for our Cisco Prime 3.1 and SSH failure

[#1]

Anyone help me,i installed Cisco Prime 3.1 and integrated it with ACS 4.0 for  Tacacus+ server AAA control

but now the username / Password keeps expiring making PI not to poll devices automatically and even adding manually

last inventory collection status showing ;wrong cli credential, Partial collection failure.

From Cisco Prime 3.1 i can ping reachable devices but can not ssh to them.

[andrewswanson]

Hi

I assume your switches have TACAC+ configured to authenticate users using TACACS+ first (using your ACS) and falling back to using local credentials if ACS is unavailable.

It sounds like your Prime server is setup to use the switch's local credentials - check your ACS logs to see if this is the case.

hth
Andy