AAA issue

[waseemrakkasgi]

I have configured AAA in the router. but i am unable to login now.

config - 

aaa new-model
!
!
aaa group server tacacs+ AAA-SERVER
server x.x.x.x
server x.x.x.x
!
aaa authentication enable default group AAA-SERVER
aaa authentication login VTY group AAA-SERVER local
aaa authentication login CONSOLE none
aaa authorization config-commands
aaa authorization exec AUTHOR group AAA-SERVER local
aaa accounting update newinfo
aaa accounting exec ACC start-stop group AAA-SERVER
aaa accounting commands 1 ACC start-stop group AAA-SERVER
aaa accounting commands 15 ACC start-stop group AAA-SERVER
aaa accounting network ACC start-stop group AAA-SERVER
aaa accounting connection ACC start-stop group AAA-SERVER
aaa accounting system default start-stop group AAA-SERVER

tacacs-server host x.x.x.x timeout 15
tacacs-server directed-request
tacacs-server key 7 XXXXXX
ip tacacs source-interface gi0/0

Please help me with the issue.

[Dennis Mink]

did you actually apply the authetication method to the actual vty line(s):

vty 0 4

 login authentication

[waseemrakkasgi]

@- Dennis

yes

[Richard Burts]

You have configured login authentication methods for vty, and for console. But you have not configured an authentication method for default. So the router would be using the default authentication which would be to use the locally configured user IDs. Have you attempted to login using a local user ID?

What you probably want to do is to configure an authentication method for default which would specify the TACACS server group.

HTH

Rick