每当我们启动或重新启动 Cisco 路由器或交换机时，我们都必须等待几分钟才能获得登录用户名提示。我们收到一些失败消息
Press RETURN to get started.
% Authentication failed
% Authentication failed
% Authentication failed
Press RETURN to get started.
几分钟后，出现以下错误消息，然后我们可以成功获得用户名提示以开始登录过程。
Aug 9 09:48:25.719: %AAA-3-DROPACCTFAIL: Accounting record dropped, send to server failed: system
我们的默认 AAA 配置是很久以前创建的，因此如果它是我们问题的原因，则可能需要进行一些更新。
VRF设备：
!
aaa new-model
aaa group server tacacs+ tacacs1
server-private <IP> key 7 <key>
server-private <IP> key 7 <key>
ip vrf forwarding <vrf-name>
ip tacacs source-interface <interface>
aaa authentication login default group tacacs1 local
aaa authentication login no_tacacs enable
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication ppp default group tacacs1
aaa authorization exec default group tacacs1 local
aaa authorization network default group tacacs1 local
aaa accounting exec default start-stop group tacacs1
aaa accounting commands 1 default stop-only group tacacs1
aaa accounting commands 15 default start-stop group tacacs1
aaa accounting network default start-stop group tacacs1
aaa accounting network acct_methods start-stop group rad_acct
aaa accounting connection default start-stop group tacacs1
aaa accounting system default start-stop group tacacs1
aaa session-id common
!
非 VRF 设备：
!
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication login no_tacacs enable
aaa authentication ppp default group tacacs+
aaa authentication dot1x default group radius
aaa authorization exec default group tacacs+ local
aaa authorization network default group radius
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default stop-only group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
aaa session-id common
!
tacacs-server host <ip>
tacacs-server host <ip>
tacacs-server directed-request
tacacs-server key 7 <key>
!