In the output we noticed that the "Destination unreachable; gateway or host down" notification while trying to communicate with the TACACS+ server. This means the TACACS+ server went down. So the next authentication method is via the local database ("Method=LOCAL"). But the authentication was failed again because of bad username, bad password or both. Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller- access-control-system-tacacs-/13864-tacacs-pppdebug.html