03-04-2014 02:01 PM - edited 02-21-2020 07:32 PM
Hi,
Below is the configuration for TACACS but authentication it's not working.
aaa new-model
!
!
aaa authentication attempts login 5
aaa authentication login default group tacacs+ local line enable
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
tacacs-server host 14.24.6.8
tacacs-server host 17.24.66.1
tacacs-server timeout 1
tacacs-server directed-request
Needs to fix the issue
Advanced Thanks.
Regards
Dhananjay.M
Solved! Go to Solution.
03-04-2014 07:13 PM
Couple of things before we jump on troubleshooting part:
1.] tacacs-server timeout 1 ->> This is a time interval for which server wait for the AAA client to reply. 1 sec is too aggressive, don't know what prompted you to configure this. Pleasee set that atleast 5 seconds.
2.] Did you configure the shared secret on the AAA client?
Run the debugs on the switch/router, try to login with tacacs credetials and paste the o/p here.
debug tacacs
debug aaa authentication
~BR
Jatin Katyal
**Do rate helpful posts**
03-04-2014 07:13 PM
Couple of things before we jump on troubleshooting part:
1.] tacacs-server timeout 1 ->> This is a time interval for which server wait for the AAA client to reply. 1 sec is too aggressive, don't know what prompted you to configure this. Pleasee set that atleast 5 seconds.
2.] Did you configure the shared secret on the AAA client?
Run the debugs on the switch/router, try to login with tacacs credetials and paste the o/p here.
debug tacacs
debug aaa authentication
~BR
Jatin Katyal
**Do rate helpful posts**
03-05-2014 11:39 AM
Thanks Jatin
-->ip tacacs source-interface
-->shared secret
Fixed the issue.
Regards
Dhananjaya.M
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide