Nexus 9000 tacacs plus configuration for 2fa using google auth (PAM)

[aayush.ghimire]

Hello all,

I am trying to configure my nexus switch (9000) to authenticate via tacacs+ installed on my linux server. I am able to access nexus switch via tacacs using the  authentication via CHAP or ASCII auth as specified by the official cisco documentation but not via PAM authentication (2fa)

Below is my tacacs conf

group = nexususer {
default service = permit
login = PAM
service = exec {
priv-lvl = 15
idletime = 5
timeout = 15
}
}

[Georg Pauwen]

Hello,

hard to say. Does the Nexus log generate any messages ?