topic Re: syslog messages in AAA in Network Access Control https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505366#M427513 <HTML><HEAD></HEAD><BODY><P>Do you perhaps have this switch console connected on a terminal server, and if so, does the terminal server have "no exec" configured on the lines used for reverse telnet?</P><P></P><P>I have seen symptoms similar to what you describe in a situation where I had a switch whose console port was connected to a terminal server and the terminal server lines did not have no exec. It looks like there was some activity on the switch which the terminal server presented a login prompt. The next text displayed on the switch was interpreted by the terminal server as the login id and was logged in the failed attempts log.</P><P></P><P>HTH</P><P></P><P>Rick</P></BODY></HTML> Wed, 05 Apr 2006 02:20:16 GMT Richard Burts 2006-04-05T02:20:16Z syslog messages in AAA https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505363#M427487 <P>I have an issue with a switch's syslog messages showing up in the failed authentication attempts report in the AAA.</P><P></P><P>If anyone has any thoughts, let me know!!</P><P></P><P>CHRIS</P> Sun, 10 Mar 2019 21:31:45 GMT https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505363#M427487 cplatt01 2019-03-10T21:31:45Z Re: syslog messages in AAA https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505364#M427496 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>This is not uncommon! I've seen all types of random stuff (usually via TACACS+).</P><P></P><P>The request packets were perfectly formed T+ requests but had data that contain what looks like random parts of the device's onboard RAM.</P><P></P><P>Most likely a similar thing.</P><P>Darran</P></BODY></HTML> Mon, 03 Apr 2006 17:36:17 GMT https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505364#M427496 darpotter 2006-04-03T17:36:17Z Re: syslog messages in AAA https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505365#M427505 <HTML><HEAD></HEAD><BODY><P>hmmm...It seems to only be happening with 1 switch. Is there anyway to prevent/stop it?</P></BODY></HTML> Mon, 03 Apr 2006 17:55:01 GMT https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505365#M427505 cplatt01 2006-04-03T17:55:01Z Re: syslog messages in AAA https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505366#M427513 <HTML><HEAD></HEAD><BODY><P>Do you perhaps have this switch console connected on a terminal server, and if so, does the terminal server have "no exec" configured on the lines used for reverse telnet?</P><P></P><P>I have seen symptoms similar to what you describe in a situation where I had a switch whose console port was connected to a terminal server and the terminal server lines did not have no exec. It looks like there was some activity on the switch which the terminal server presented a login prompt. The next text displayed on the switch was interpreted by the terminal server as the login id and was logged in the failed attempts log.</P><P></P><P>HTH</P><P></P><P>Rick</P></BODY></HTML> Wed, 05 Apr 2006 02:20:16 GMT https://community.cisco.com/t5/network-access-control/syslog-messages-in-aaa/m-p/505366#M427513 Richard Burts 2006-04-05T02:20:16Z