ACS tacac authentication : A TACACS+ packet was received with a source IP Address that did not match any configured Network Device or AAA Client.

[vinodjad1234]

Hi Experts,

we have single ip address with /32 configured in AAA client list. After AAA configuration in switches , we are getting message as a “ Tacac server is not available please try login with local account “ .

ACS logs : ----

A TACACS+ packet was received with a source IP Address that did not match any configured Network Device or AAA Client.

The acs appliances was seeing the communication coming from the switch from a different ip address.

whether we need to do some changes in switch configuration ?

please suggest me for the same.

[tfraij]

Hello Vinod,

can you please check on your switch if

ip tacacs source-interface is configured with correct interface on your switch?

if yes , do you have any natting device between switch and ACS?

Kind regards

Talal

=========

please rate answers that you find useful , and mark as answered - when it is :-) - so others can find it easily