Issues with TACACS authentication

[Mohd Khairul Nizam]

i'm having issues with TACACS authentication,

What is the issues 

[Rob Ingram]

Hi,

With this error:-

*Mar 2 12:22:55.032: TAC+: received bad AUTHEN packet:

I'd say the shared secret was incorrect, check this is the same on the switch/router and on the ISE/ACS server, under the Network Device object.

HTH

[RicardoDiaz]

Please verify shared secret

Invalid AUTHEN/START/LOGIN/ASCII packet (check keys) 

Regards

[costaspal]

Hi there
Pretty sure it's the key...
Don't start with a complex password, try something simple first, that worked for me !
Costas

[kthiruve · Accepted solution]

1. Please make sure you have used the correct protocol (PAP/CHAP).

2. Look at the ISE server TACACS logs and see what is going on. If ISE does not receive packets or drops packets then it could be wrong shared secret.

3. Make sure your TACACS+ auth policy is configured correctly.  Use the correct username/password etc for authentication

Here is the latest guide uploaded that can help you.

https://community.cisco.com/t5/security-documents/cisco-ise-device-administration-prescriptive-deployment-guide/ta-p/3738365

-Krishnan

[thomas · Accepted solution]

Please read How to Ask The Community for Help in order to provide us with enough information to provide suggestions.

Otherwise you'll need to call TAC.