TACACS Remote Address from Console

[pinglis]

I have set up a new stack of Catalyst 9300 switches and when I login from the console (using USB port) the remote address seen by ISE in the TACACS logs is 192.168.1.5.

Previously console logins show a Remote Access of "async".

To be clear I am not talking about the switches source address but the address of the client connecting to the switch.

Is there any way to configure the Remote Address sent for console logins?

We have a policy restricting access to specific Remote Address and I would like to avoid including 192.168.x.x in the policy.

[hslai · Accepted solution]

In case the previous console logins were via RJ45, then it seems a bug and would recommend to contact TAC to report it.

In my experience, async is usually meant connections to a terminal server port.