You also must identify the server to the device using the tacacs-server command. privilege-mode device(config)# aaa authentication login default radius local..