12-06-2022 11:25 AM
Hello. I was testing my local account today via console, aaa server not being available, and could only logon if I connected to the member switch. I have a stack with an ICX7450-48P and ICX7450-24P. If I issue the show stack the 48P is the role of active and the 24P is the role of standby. Both are running 8095G switch code and both have the same boot monitor of 10.1.24. Any ideas why I'm only able to logon with the local account if I'm consoled into the member switch? Thanks.
12-06-2022 11:30 AM - edited 12-06-2022 11:31 AM
What does your aaa configuration look like? It sounds like the master may think the aaa server is available. You may want to open a support case to get this looked at (see my signature).
12-06-2022 11:35 AM
Hello. This is the output of the AAA.
#sh run | i aaa
aaa authentication web-server default local
aaa authentication enable default tacacs+ local
aaa authentication dot1x default radius
aaa authentication login default tacacs+ local
aaa authentication login privilege-mode
aaa authorization commands 0 default tacacs+ none
aaa authorization coa enable
aaa authorization exec default tacacs+ none
aaa accounting commands 0 default start-stop tacacs+ none
aaa accounting exec default start-stop tacacs+ none
aaa accounting dot1x default start-stop radius
aaa accounting mac-auth default start-stop radius
aaa accounting system default start-stop tacacs+ none
enable aaa console
tacacs-server host 1.1.1.1
tacacs-server host 2.2.2.2
tacacs-server key 2 y7y7y7y7y7y7y7y7y7y7y
12-06-2022 12:28 PM
Got it. It's hard to say what is happening there. It would seem the active unit likely still trying to use first method of auth. Please open a case and an engineer can help deep-dive into this for you.