The last command "aaa authentication login telnet group TAC-SERV" created the method list name telnet so we need to assign it to line vty. Reference: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200208- Configure-ISE-2-0-IOS-TACACS-Authentic.html