Prateek,
It looks like you may have configured "aaa authentication login default group tacacs+ local" command and the request to the tacacs server failed (i.e. - tacacs server not functional), so then it would look for a local username on the router and it looks like you may not have configured a local username. I'm not sure this is your problem, but it is something to check.
HTH,
John
-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of prateek reddy
Sent: Thursday, January 21, 2010 5:22 AM
To: Cisco certification
Subject: TACACS+ Authentication problem.
Tacacs was implemented through out the network.. Out of all peers jus one peer i.e CISCO GSR 12140 it is not getting authenticated. Below is the output of Debug... so please help me solving that thatk you.
an 21 15:10:29.830: AAA/AUTHEN/START (3181024263): Method=TACACS+ an 21 15:10:29.830: TAC+: send AUTHEN/START packet ver=192 id=3181024263 an 21 15:10:29.942: AAA/AUTHEN (3181024263): status = ERROR an 21 15:10:29.942: AAA/AUTHEN/START (3181024263): Method=LOCAL an 21 15:10:29.942: AAA/AUTHEN (3181024263): status = GETUSER
sername:
an 21 15:10:58.601: AAA/AUTHEN/CONT (3181024263): continue_login
(user='(undef)')
an 21 15:10:58.601: AAA/AUTHEN (3181024263): status = GETUSER an 21 15:10:58.601: AAA/AUTHEN/CONT (3181024263): Method=LOCAL an 21 15:10:58.601: AAA/AUTHEN/LOCAL (3181024263): no username: GETUSER an 21 15:10:58.601: AAA/AUTHEN (3181024263): status = GETUSERrajesh
assword:
an 21 15:11:02.237: AAA/AUTHEN/CONT (3181024263): continue_login (user='') an 21 15:11:02.237: AAA/AUTHEN (3181024263): status = GETUSER an 21 15:11:02.237: AAA/AUTHEN/CONT (3181024263): Method=LOCAL an 21 15:11:02.237: AAA/AUTHEN (3181024263): status = GETPASS Authentication failed.
an 21 15:11:06.672: AAA/AUTHEN/CONT (3181024263): continue_login
(user='rajesh')
an 21 15:11:06.672: AAA/AUTHEN (3181024263): status = GETPASS an 21 15:11:06.672: AAA/AUTHEN/CONT (3181024263): Method=LOCAL an 21 15:11:06.672: AAA/AUTHEN (3181024263): User not found an 21 15:11:06.672: AAA/AUTHEN (3181024263): status = FAIL
-- With Regards, K.V.Madhu Prateek Reddy. Blogs and organic groups at http://www.ccie.netReceived on Thu Jan 21 2010 - 07:29:30 ART
This archive was generated by hypermail 2.2.0 : Thu Feb 04 2010 - 20:28:41 ART