See router config for more details Note syntax change in the authentication and accounting defs (must take into account switch groups). -------------------------------------------------------------------------------- testsw#sh running-config Building configuration... Current configuration: ! version 12.0 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname testsw ! aaa new-model aaa authentication login secureid group tacacs+ line aaa accounting exec default start-stop group tacacs+ aaa accounting commands 15 default start-stop group tacacs+ aaa accounting network default start-stop group tacacs+ aaa accounting system default start-stop group tacacs+ enable secret 5 $1$Uxxxxxxxxxxxxxxxxxxxxxxxxxxxx ! ! ! ! ! ! ip subnet-zero ip host ace2 192.168.18.10 ip host ace1 192.168.16.10 ! ! ! interface FastEthernet0/1 ! interface FastEthernet0/2 ! interface FastEthernet0/3 ! interface FastEthernet0/4 ! interface FastEthernet0/5 ! interface FastEthernet0/6 ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 ! interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 ! interface FastEthernet0/24 ! interface VLAN1 ip address 10.10.10.243 255.255.255.0 no ip directed-broadcast no ip route-cache ! ip default-gateway 10.10.10.1 tacacs-server host 192.168.16.10 tacacs-server host 192.168.18.10 tacacs-server key sfo2600 ! line con 0 login authentication secureid transport input none stopbits 1 line vty 0 4 password password login authentication secureid line vty 5 15 password password ! end