Tacacs error with FortiAuthenticator

[OptimasIT]

Can someone tell me what this means?

Log Type
Type Id 20356
Name Authentication Failed NAS Sub-Profile
Sub Category Authentication
Category Event
Description Authentication failed, NAS sub-profile requirements not met

I copied the configuration from one switch to another and in the tacacs policy I have any device (10.0.0.0/8) as a client. I don't know what the problem could be. 

[akanibek]

Hey @OptimasIT ,

could you please reproduce the issue and share us outputs from FAC radius logs:

Also, test it with adding separate client on FAC.

https://FAC-IP/debug/radius