topic AAA with Catalyst 2950 switch in Network Access Control https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748335#M213719 <HTML><HEAD></HEAD><BODY><P>I'm willing to bet you 3:1 odds that you have something connected to the AUX port, like a terminal services port, modem, etc., and it is causing the attempted logins with spurrious interrupts.</P><P></P><P>-Jeff</P></BODY></HTML> Tue, 08 Nov 2011 02:05:57 GMT Jeff Bankston 2011-11-08T02:05:57Z AAA with Catalyst 2950 switch https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748334#M213718 <P>I have a Cisco ACS 4.2 running on Windows 2003. Authentication is working fine for various cisco devices like routers, VPN concentrator etc.</P><P>Today I added a 48 port L2 switch as a AAA client, the authentication works fine. However I see many failed login attempts from this L2 switch with the user "C"</P><P></P><P>Message-Type: Authen failed</P><P>Caller-ID: async</P><P>Authen-Failure-Code: External DB user invalid or bad password</P><P>NAS-Port: tty0</P><P></P><P>What is causing this failed login?</P> Mon, 11 Mar 2019 01:32:16 GMT https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748334#M213718 avilt 2019-03-11T01:32:16Z AAA with Catalyst 2950 switch https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748335#M213719 <HTML><HEAD></HEAD><BODY><P>I'm willing to bet you 3:1 odds that you have something connected to the AUX port, like a terminal services port, modem, etc., and it is causing the attempted logins with spurrious interrupts.</P><P></P><P>-Jeff</P></BODY></HTML> Tue, 08 Nov 2011 02:05:57 GMT https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748335#M213719 Jeff Bankston 2011-11-08T02:05:57Z AAA with Catalyst 2950 switch https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748336#M213720 <HTML><HEAD></HEAD><BODY><P>Only console port is connected to a console router and telnet is also allowed on vty 0 4. Auxilary port is not connected.</P></BODY></HTML> Tue, 08 Nov 2011 04:35:26 GMT https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748336#M213720 avilt 2011-11-08T04:35:26Z AAA with Catalyst 2950 switch https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748337#M213721 <HTML><HEAD></HEAD><BODY><P>If the console port on the switch generating the spurious login errors is connected to a device offering remote access to the console port, then it's likely that some output from this device is causing the bogus login attempt.</P><P></P><P>If this device is an IOS router with a bunch of asynch ports add "no exec" to the line connected to the switch console port.</P></BODY></HTML> Mon, 14 Nov 2011 16:32:39 GMT https://community.cisco.com/t5/network-access-control/aaa-with-catalyst-2950-switch/m-p/1748337#M213721 Javier Henderson 2011-11-14T16:32:39Z