What is the rule to mark the TACACS server as dead for IOS-XE ?

[SMD28316]

For RADIUS, deadtime criteria is used to mark a RADIUS server as dead / alive, what about TACACS? network device surely doesn’t continuously ping the servers, so i don't think ICMP is used to check.

All the documents I have for RADIUS, not TACACS, and I could find for IOS, that we can configure TACACS deadtime, but not for IOS-XE, is there a special configuration that can  be used for IOS-XE?

[balaji.bandi · Accepted solution]

The Failure scenario is based on the reply from TACACS when the connection request is sent to TACACS Server. based on the attempt and time, it will make it dead.

below logs will help you :

https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/200467-Troubleshoot-TACACS-Authentication-Issue.html

you can setup timer :

https://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/kvm/config_guide/security/b_Cisco_Nexus_1000V_for_KVM_Security_Configuration_Guide_521SK111_chapter_0100.html#task_13F36958574C42318946A9E4CF435D65