Solved: Velezm,

raul saurez · ‎10-29-2015

I am unable to authenticate using AD Tacacs credentials on a router but I can access user local account. It was a router moved to a different site where it was working but now isnt. The IP is the same. I have attached one that is working. Can anyone tell me what I am missing?

Jagdeep Gambhir · ‎10-29-2015

Velezm,

First make sure that TACACS is reachable from router (ping via loopback0 ). If that is fine then look for any firewall blocking port 49. Check if there are any hits on tacacs logs? if not then most likely request is not reaching tacacs server.

Get debugs,

- debug tacacs

- debug aaa authentication

Regards,

~JG

View solution in original post

Jagdeep Gambhir · ‎10-29-2015

Velezm,

First make sure that TACACS is reachable from router (ping via loopback0 ). If that is fine then look for any firewall blocking port 49. Check if there are any hits on tacacs logs? if not then most likely request is not reaching tacacs server.

Tacacs Problems

Velezm,

First make sure that TACACS is reachable from router (ping via loopback0 ). If that is fine then look for any firewall blocking port 49. Check if there are any hits on tacacs logs? if not then most likely request is not reaching tacacs server.

Get debugs,

- debug tacacs

- debug aaa authentication

Regards,

~JG

Velezm,

First make sure that TACACS is reachable from router (ping via loopback0 ). If that is fine then look for any firewall blocking port 49. Check if there are any hits on tacacs logs? if not then most likely request is not reaching tacacs server.

Get debugs,

- debug tacacs

- debug aaa authentication

Regards,

~JG