Nexus 9k incorrect name-lookups

[TheMan2024]

Hi,

nxos.9.3.12.bin

Having a strange issue with our N9K's.  There a re long pauses between any commands entered.  Checked logs and saw:

2024 Feb 16 15:55:50 DC3-N9K-BGW01 %TACACS-4-TACACS_WARNING: Problem during name-lookup. Error:-3(temporary failure in name resolution)
2024 Feb 16 16:00:21 DC3-N9K-BGW01 %TACACS-4-TACACS_WARNING: Problem during name-lookup. Error:-3(temporary failure in name resolution) (message repeated 1 time)
2024 Feb 16 16:03:11 DC3-N9K-BGW01 %TACACS-4-TACACS_WARNING: Problem during name-lookup. Error:-3(temporary failure in name resolution) (message repeated 3 times)

There is no name lookup configured on this device and all entries are IP based so dependency on DNS.  Could this be a bug?

[MHM Cisco World]

https://bst.cisco.com/bugsearch/bug/CSCtz32293

Bug

MHM

[balaji.bandi]

is your connectivity to TACACS good ? using source interface, is this intermediate or same all the time ?

Look at the below thread :

https://community.cisco.com/t5/network-management/nexus-9k-tacacs-issue-tacacs-3-tacacs-error-message-all-servers/td-p/4288015

[TheMan2024]

There are 4 of these devices hitting the same ISE servers via IP name.  No connectivity issues between between anything.  

[balaji.bandi]

same ISE servers via IP name

can you post same configuration and   

show tacacs-server statistics

[TheMan2024]

aaa group server tacacs+ ISE_TACACS+
server 10.3.241.38
server 10.4.241.38
server 10.3.245.36
server 10.4.241.39
use-vrf management

sh tacacs-server statistics 10.3.241.38
Server is not monitored

Authentication Statistics
failed transactions: 14
successful transactions: 302
requests sent: 302
requests timed out: 14
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Authorization Statistics
failed transactions: 39
successful transactions: 1904
requests sent: 1904
requests timed out: 39
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Accounting Statistics
failed transactions: 391
successful transactions: 1771
requests sent: 1772
requests timed out: 390
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0
DC3-N9K-LEF01# sh tacacs-server statistics 10.4.241.38
Server is not monitored

Authentication Statistics
failed transactions: 14
successful transactions: 0
requests sent: 0
requests timed out: 14
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Authorization Statistics
failed transactions: 40
successful transactions: 0
requests sent: 0
requests timed out: 40
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Accounting Statistics
failed transactions: 290
successful transactions: 101
requests sent: 101
requests timed out: 289
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0
DC3-N9K-LEF01# sh tacacs-server statistics 10.3.245.36
Server is not monitored

Authentication Statistics
failed transactions: 1
successful transactions: 13
requests sent: 13
requests timed out: 1
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Authorization Statistics
failed transactions: 0
successful transactions: 54
requests sent: 54
requests timed out: 0
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Accounting Statistics
failed transactions: 162
successful transactions: 128
requests sent: 128
requests timed out: 162
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0
DC3-N9K-LEF01# sh tacacs-server statistics 10.4.241.39
Server is not monitored

Authentication Statistics
failed transactions: 1
successful transactions: 0
requests sent: 0
requests timed out: 0
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Authorization Statistics
failed transactions: 0
successful transactions: 0
requests sent: 0
requests timed out: 0
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

Accounting Statistics
failed transactions: 162
successful transactions: 0
requests sent: 0
requests timed out: 0
responses with no matching requests: 0
responses not processed: 0
responses containing errors: 0

[balaji.bandi]

you using use-vrf management is this correct interface to reach ISE ?

[TheMan2024]

Yes, that's the correct vrf as all the others.