As you can see from the title I have a question about ISE 2.4 TACACS+ and a shared secret mismatch error. We are able to access the device, WLC 3504, via SSH and the RADIUS live logs report connections; however, on the TACACS+ side there maybe in issue. What makes it interesting and difficult to track is that the error doesn't display what account is attempting to log in to the WLC and failing, see the attached screenshot.
The only thing I have to go on is that when I do see this error it is surrounded above and below by a service account that is successfully connecting to the same device, the WLC.
I double checked and changed the shared secret so we know they are the same in all entries of Network Devices.
My questions is:
How do you identify which user/device is attempting to connect via TACACS+ if no account name is displayed in the live log or the Identity column?
ej
