TACACS+ configuration in 3750 Switch

[S.ashok S]

Hi,

I have configured the below command in my Cisco 3750 Switch but still it is using local data base instead of credentials configured in TACACS+ server. Can any one help to resolve the issue.

Configuration:

TACACS: 

tacacs-server host X.X.X.X

tacacs-server directed-request

tacacs-server key XXXXXX

AAA:

aaa new-model

aaa authentication login default group tacacs+ local

aaa authentication login LOCAL_CONSOLE local

aaa accounting commands 2 default start-stop group tacacs+

I have checked that my switch is reachable to the server.

Thanks in advance.

Thanks,

Srini

[nspasov]

Few questions:

1. Can you provide the configurations for your VTY and Console lines. 

2. How are you trying to connect? Via VTY or console

3. Do you see any logs on the TACACS+ server

4. Post the output from the following debugs:

debug aaa authentication

debug tacacs

Thank you for rating helpful posts!

[S.ashok S · Accepted solution]

Hi,

Thank you for your reply. We have collected the debug logs, showing error as below

Feb 17 07:46:18.800: TPLUS(00000387)/0: Connect Error No route to host.

The issue has been resolved after given ip classless command.

Thanks,

Srini

[nspasov]

Glad you resolved the issue! Also, thank you for taking the time to come back and post the solution!