Hey All,
I've got 2 separate switch stacks that are having this issue in our network. When logging in through the console, I'm only able to login with our local login credentials to the master switch. Member switches give me a response of "Tacacs session has expired. Please re-login to continue." No issues seeing both swtiches when logging in with SSH. All switches in the stack are WS-C2960X-48TS-L. These switches were previously on 15.0(2)EX4 firmware but have since been upgraded to 15.2(7)E8 with no change. I have console currently tied back to aaa and am using the same configurations for both stacks. posting config below.
username [USER] privilege 15 secret 5 [SECRET]
aaa new-model
!
!
aaa group server radius {RADIUS SERVER}
server name x.x.x.x
server x.x.x.x auth-port 1812 acct-port 1813
!
aaa group server tacacs+ {TACACS SERVER}
server x.x.x.x
!
aaa authentication login default group tacacs+ local
aaa authentication login CONSOLE line local-case
aaa authentication enable default enable
aaa authentication dot1x default group {RADIUS SERVER}
aaa authorization config-commands
aaa authorization exec default group tacacs+ local
aaa authorization commands 0 default group tacacs+ local
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa authorization network default group {RADIUS SERVER}
aaa authorization auth-proxy default group radius
aaa accounting dot1x default start-stop group {RADIUS SERVER}
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
line con 0
login authentication CONSOLE
