03-04-2014 02:01 PM - edited 02-21-2020 07:32 PM
Hi,
Below is the configuration for TACACS but authentication it's not working.
aaa new-model
!
!
aaa authentication attempts login 5
aaa authentication login default group tacacs+ local line enable
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
tacacs-server host 14.24.6.8
tacacs-server host 17.24.66.1
tacacs-server timeout 1
tacacs-server directed-request
Needs to fix the issue
Advanced Thanks.
Regards
Dhananjay.M
Solved! Go to Solution.
03-04-2014 07:13 PM
Couple of things before we jump on troubleshooting part:
1.] tacacs-server timeout 1 ->> This is a time interval for which server wait for the AAA client to reply. 1 sec is too aggressive, don't know what prompted you to configure this. Pleasee set that atleast 5 seconds.
2.] Did you configure the shared secret on the AAA client?
Run the debugs on the switch/router, try to login with tacacs credetials and paste the o/p here.
debug tacacs
debug aaa authentication
~BR
Jatin Katyal
**Do rate helpful posts**
03-04-2014 07:13 PM
Couple of things before we jump on troubleshooting part:
1.] tacacs-server timeout 1 ->> This is a time interval for which server wait for the AAA client to reply. 1 sec is too aggressive, don't know what prompted you to configure this. Pleasee set that atleast 5 seconds.
2.] Did you configure the shared secret on the AAA client?
Run the debugs on the switch/router, try to login with tacacs credetials and paste the o/p here.
debug tacacs
debug aaa authentication
~BR
Jatin Katyal
**Do rate helpful posts**
03-05-2014 11:39 AM
Thanks Jatin
-->ip tacacs source-interface
-->shared secret
Fixed the issue.
Regards
Dhananjaya.M
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: