Shulou(Shulou.com)06/01 Report--

Tacacs+ ACS

R1#==tacacs+====by = acs===

R1#

AAA/BIND (0000000C): Bind iUnip f

AAA/AUTHEN/LOGIN (0000000C): Pick method list 'default'

.May 2 10:34:38.973: TPLUS: Queuing AAA Authentication request 12 for processing

.May 2 10:34:38.977: TPLUS: processing authentication start request id 12

.May 2 10 3415 38.981: TPLUS: Authentication start packet created for 12 ()

.May 2 10:34:38.981: TPLUS: Using server 192.168.159.yyy

.May 2 10 Started 34 38.989: TPLUS (0000000C) / 0/NB_WAIT/63DB51E0: Started 5 sec timeout

TPLUS (0000000C) / 0/NB_WAIT: socket event 2

.May 2 10 seq 34 type 39.033: titled: Version 192 (0xC0), May 1, seq 1, encryption 1

.May 2 10 dlen 34 dlen 39.033: tipped: session_id 2736838980 (0xA320D944), May 26 (0x1A)

.May 2 10 3414 39.033: tipped: type:AUTHEN/START, priv_lvl:1 action:LOGIN ascii

.May 2 10 raddr_len:13 34 0xD 39.033: tipped: svc:LOGIN user_len:0 port_len:5 (0x5) raddr_len:13 (0xD) data_len:0

.May 2 10 3414 39.037: tipped: user:

.May 2 10 34 14 39.037: titled: port: tty66

.May 2 10 34 14 39.037: titled: rem_addr: 192.168.159.xxx

.May 2 10 3414 39.037: tipped: data:

.May 2 10 34 14 39.037: tipped: End Packet

.May 2 10 wrote entire 34) 39.041: TPLUS (0000000C) / 0/NB_WAIT: wrote entire 38 bytes request

.May 2 10 socket event 34 socket event 39.045: TPLUS (0000000C) / May:

TPLUS (0000000C) / 0/READ: Would block while reading

.May 2 10 socket event 34: 39.053: TPLUS (0000000C) / 0/READ: socket event 1

.May 2 10 read entire 34 header bytes 39.053: TPLUS (0000000C) / 0/READ: read entire 12 header bytes (expect 16 bytes data)

.May 2 10 socket event 34: 39.053: TPLUS (0000000C) / 0/READ: socket event 1

.May 2 10 read entire 34 bytes response 39.053: TPLUS (0000000C) / 0/READ: read entire 28

.May 2 10 type 34 seq 39.057: titled: Version 192 (0xC0), May 1, seq 2, encryption 1

.May 2 10 dlen 34 dlen 39.057: tipped: session_id 2736838980 (0xA320D944), May 16 (0x10)

.May 2 10 3414 39.057: AUTHEN/REPLY status:4 flags:0x0 msg_len:10, data_len:0

.May 2 10 3414 39.057: tipped: msg: username:

.May 2 10 3414 39.057: tipped: data:

.May 2 10 34 14 39.057: tipped: End Packet

TPLUS (0000000C) / 0/63DB51E0: Processing the reply packet

TPLUS: Received authen response status GET_USER (7)

R1#

R1#

-- type-user--

.May 2 10:34:46.917: TPLUS: Queuing AAA Authentication request 12 for processing

.May 2 10:34:46.921: TPLUS: processing authentication continue request id 12

.May 2 10:34:46.921: TPLUS: Authentication continue packet generated for 12

.May 2 10 Started 34 sec timeout 46.925: TPLUS (0000000C) / 0/WRITE/63DB51E0: Started 5 sec timeout

.May 2 10 seq 34 seq 46.925: tipped: Version 192 (0xC0), type 1, seq 3, encryption 1

Session_id 2736838980 (0xA320D944), dlen 14 (0xE)

.May 2 10 data_len:0 34 flags:0x0 46.925: titled: AUTHEN/CONT msg_len:9 (0x9), data_len:0 (0x0)

.May 2 10 14 14 14 46.925: titled: User msg:

.May 2 10 14 14 14 46.925: titled: User data:

.May 2 10 3414 46.929: titled: End Packet

.May 2 10 wrote entire 34 bytes request 46.929: TPLUS (0000000C) / 0/WRITE: wrote entire 26

.May 2 10 socket event 34: 46.937: TPLUS (0000000C) / 0/READ: socket event 1

.May 2 10 read entire 34 header bytes 46.937: TPLUS (0000000C) / 0/READ: read entire 12 header bytes (expect 16 bytes data)

.May 2 10 socket event 34: 46.941: TPLUS (0000000C) / 0/READ: socket event 1

.May 2 10 read entire 34 bytes response 46.941: TPLUS (0000000C) / 0/READ: read entire 28

.May 2 10 seq 34 seq 46.941: tipped: Version 192 (0xC0), type 1, seq 4, encryption 1

Session_id 2736838980 (0xA320D944), dlen 16 (0x10)

.May 2 10 3414 46.941: AUTHEN/REPLY status:5 flags:0x1 msg_len:10, data_len:0

.May 2 10 msg 34: 46.945: tipped: msg: password:

.May 2 10 34 14: 46.945: tipped: data:

.May 2 10 34 14 46.945: titled: End Packet

TPLUS (0000000C) / 0/63DB51E0: Processing the reply packet

TPLUS: Received authen response status GET_PASSWORD (8)

R1#

R1#

R1#

Ringing-- type-passwd--

R1#

.May 2 10:34:58.369: TPLUS: Queuing AAA Authentication request 12 for processing

.May 2 10:34:58.373: TPLUS: processing authentication continue request id 12

.May 2 10:34:58.377: TPLUS: Authentication continue packet generated for 12

.May 2 10 Started 34 sec timeout 58.377: TPLUS (0000000C) / 0/WRITE/63DB51E0: Started 5

.May 2 10 type 34 encryption 58.377: tipped: Version 192 (0xC0), May 1, seq 5, May 1

.May 2 10 dlen 34. 58. 377: session_id 2736838980 (0xA320D944), May 21 (0x15).

.May 2 10 data_len:0 34 0x0 58.377: tipped: AUTHEN/CONT msg_len:16 (0x10), data_len:0 (0x0) flags:0x0

.May 2 10 34 14 58. 381: tipped: User msg:

.May 2 10 34 14 58. 381: tipped: User data:

.May 2 10 34 14 58. 381: tipped: End Packet

R1#

TPLUS (0000000C) / 0/WRITE: wrote entire 33 bytes request

.May 2 10 socket event 34R 58.429: TPLUS (0000000C) / 0/READ: socket event 1

.May 2 10 read entire 34R 58.433: TPLUS (0000000C) / 0/READ: read entire 12 header bytes (expect 6 bytes data)

TPLUS (0000000C) / 0/READ: socket event 1

.May 2 10 read entire 34 bytes response 58.433: TPLUS (0000000C) / 0/READ: read entire 18

.May 2 10 type 34 encryption 58.437: tipped: Version 192 (0xC0), May 1, seq 6, May 1

.May 2 10 dlen 34R 58.437: tipped: session_id 2736838980 (0xA320D944), dlen 6 (0x6)

.May 2 10 34 14 58. 437: AUTHEN/REPLY status:1 flags:0x0 msg_len:0, data_len:0

.May 2 10 34 14 58. 437: tipped: msg:

.May 2 10 34 14 58. 437: tipped: data:

.May 2 10 34 14 58. 437: tipped: End Packet

.May 2 10 Processing the reply packet 34R 58.441: TPLUS (0000000C) / Processing the reply packet

TPLUS: Received authen response status PASS (2)

.May 2 10 type 34 14 58 50 9: Version 192 (0xC0), May 2

R1#seq 1, encryption 1

.May 2 10 dlen 34 0x36 58.509: tipped: session_id 613042473 (0x248A4929), May 54 (0x36)

.May 2 10 authen:1 method:tacacs+ 34R 58.509: tipped: AUTHOR, priv_lvl:1, authen:1 method:tacacs+

.May 2 10 3414 58. 509: tipped: svc:1 user_len:9 port_len:5 rem_addr_len:13 arg_cnt:2

.May 2 10 34R 58.513: tipped: user: adminuser

.May 2 10 34R 58.513: tipped: port: tty66

.May 2 10 34R 58.513: tipped: rem_addr: 192.168.159.xxx

.May 2 10 34R 58.513: tipped: arg [0]: size:13 service=shell

.May 2 10 34R 58.513: tribute: arg [1]: size:4 cmd*

.May 2 10 3414 58. 517: tipped: End Packet

Type 2, seq 2, encryption 1, May 2, May 2, May 2

.May 2 10 dlen 34R 58.529: tipped: session_id 613042473 (0x248A4929), dlen 18 (0x12)

.May 2 10 34 14 58. 529: AUTHOR/REPLY status:1 msg_len:0, data_len:0 arg_cnt:1

.May 2 10 34R 58.533: tipped: msg:

.May 2 10 34R 58.533: tipped: data:

.May 2 10 34R 58.533: tipped: arg [0] size:11

.May 2 10 3414 58. 533: tipped: priv-lvl=15

.May 2 10 3414 58. 533: tipped: End Packet

R1#

R1

Ringing-telnet-show run-sh ip int bri-

R1#

R1#

.May 2 10:35:11.801: AAA: parse name=tty66 idb type=-1 tty=-1

.May 2 10:35:11.805: AAA: name=tty66 flags=0x11 type=5 shelf=0 slot=0 adapter=0 port=66 channel=0

.May 2 10 0x639B27A8 35 user='adminuser' ruser='R1' ds0=0 port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=15 initial_task_id='0', vrf= 11.805: AAA/MEMORY: create_user (0x639B27A8)

.May 2 10 35 12. 029: TAC+: (2043416142): received author response status = PASS_ADD

.May 2 10 0x639B27A8 35 12. 033: AAA/MEMORY: free_user (0x639B27A8) user='adminuser' ruser='R1' port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=15 vrf= (id=0)

R1#

.May 2 10:35:20.181: AAA: parse name=tty66 idb type=-1 tty=-1

.May 2 10:35:20.181: AAA: name=tty66 flags=0x11 type=5 shelf=0 slot=0 adapter=0 port=66 channel=0

.May 2 10 0x63E5A84C 35 20. 185: AAA/MEMORY: create_user (0x63E5A84C) user='adminuser' ruser='R1' ds0=0 port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=1 initial_task_id='0', vrf= (id=0)

.May 2 10 PASS_ADD 35 PASS_ADD 20. 405: TAC+: (- 1481682141):

.May 2 10 0x63E5A84C 35 user='adminuser' ruser='R1' port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=1 vrf= 20.409: AAA/MEMORY: free_user (0x63E5A84C)

R1#

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.