The local-case option uses case-sensitive local usernames. Set authentication for login aaa authentication login default group tacacs+ enable none .