appliance cannot log in using TACACS+ , but AAA test is successful

[SabeelShakeel00430]

Hi,

I have configured tacacs on my fortiproxy appliance and can successfully contact cisco ISE using the AAA test commands (with my credentials). Although, the server is contactable and the credentials have been recognized via ISE - When i log out of the appliance and try logging in with my tacacs credentials it fails to authenticate. Is there anything on ISE that needs to be configured to allow the GUI to log into the appliance ?

Best Regards,

Sabeel 

[balaji.bandi · Accepted solution]

I have configured tacacs on my fortiproxy appliance and can successfully contact cisco ISE using the AAA test commands (with my credentials). 

is this a local account of fotiproxy ?

Although, the server is contactable and the credentials have been recognized via ISE - When i log out of the appliance and try logging in with my tacacs credentials it fails to authenticate.

 Do you have user source from different or on ISE you created a users ?

have you added fortiproxy as NAD on ISE ?

what logs you see on ISE when you try to login ?

[thomas · Accepted solution]

You need to include actual errors and details from the ISE LiveLogs.

"The credentials have been recognized by ISE" and "it fails to authenticate" is not specific for any troubleshooting or offering advice for next steps.

You have not followed up on @balaji.bandi 's very legitimate questions so I will refer you to the TAC.