cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
652
Views
0
Helpful
2
Replies

Cisco 6509 tacacs authentication problem

ROHIT SHARMA
Level 1
Level 1

Hello Friends,

I have a Cisco 6509 switch running Version 12.2(33)SXI7 configured aaa new-model.

I have 2 tacacs+ servers configured for authentication.

When I test the authentication using the "test aaa" command it works fine and the authentication result is successful, but when I actually try to log in via SSH, the same user its not able to authenticate and keeps asking for the password.

I captured packets on the uplink interface and could see that for the "test aaa" command, the switch was sending tacacs+ authentication packets to the aaa server, but when I actually try to log in, it wasn't sending any such request.

It's a very weird issue and I am thinking if it could be due to some stuck process or any other issue which could be resolved by a reboot. the switch has been up for 10 years now.

Any help would be much appreciated. 

2 Replies 2

marce1000
VIP
VIP

 

           - Check logs on the 6509 when the SSH is tried , and also the aaa server (TACACS) logs , 

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

It doesn't show anything in the logs when I attempt to login. Any other ideas please?

Review Cisco Networking for a $25 gift card