> the client has to use authorization. also see the -d/debug options. > You mean as opposed to authentication ? The client in this case is a PIX that's using tacacs to verify the user's credentials.