TACACS for AAA on Cisco Switch

[networker99]

I have configured our switches for TACACS authentication however it does not seem to be working. I know it is trying as if I remove the secondary login option (local) I am denied access completely but I see no log on the ACS server. Any ideas?, oh and this is going across an any to any VPN

[Ivan Martinon]

Can you log into your switch, and turn on the debug aaa authentication, and debug tacacs.

Then go ahead and issue a test aaa group.. command to test the authentication, do you see it timing out? Are you using a source interface for this traffic? is that source interface inside the lan to lan intersting traffic?