cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
477
Views
0
Helpful
1
Replies

Error Authenticating to Tacacs server

freqeuncyhop
Level 1
Level 1

I am trying to configure TACACS+ on a CBS350 switch but any authentication efforts fail with this error message: 

%AAA-W-TACACSAUTHEN: Received unsupported authentication REPLY msg status=7 (server msg: Inconsistent lengths)

and then it defaults back to local authentication. 

Here is my AAA config: 

#show run | inc aaa
ip http authentication aaa login-authentication login-authorization tacacs local
aaa authentication login company tacacs local
aaa authentication enable company tacacs
aaa authentication login authorization default tacacs local
aaa authentication enable default tacacs
aaa accounting login start-stop group tacacs+

 

and TACACS config

 

encrypted tacacs-server host <ip-add> single-connection key <passkey>
tacacs-server timeout 30
tacacs-server host source-interface vlan <int>

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

what TACACS+ Server are you using? what logs do you see on the TACACS side?

Also see may AAA configured ?

Do some basic config and test it :

https://www.cisco.com/c/en/us/td/docs/switches/lan/csbms/CBS_250_350/CLI/cbs-350-cli-/aaa_commands.html?bookSearch=true

 

#telnet TACACSIP  49  < is this works ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help