You notice that it tries to reach the TACACS server 10.20.220.141. It is an expected default behavior. There is no username cisco1 configured on the TACACS server, hence shows Authentication failed. If the device has AAA Authentication login default group tacacs+ local % Authentication failed message..