ACS 5.0 report: user's ip address information not available

[abu_bucker]

Hi,

I am using ACS 5.0 for TACACS+ Authentication and Accounting.

I am facing an issue related to reports.

When I click the detail for any failed / passed authentication entry on AAA Protocol > TACACS+ Authentication page, The remote address (under user, just below the username filed) field is empty. The screen shot is attached herewith for reference.

How can I get the remote ip address of the user who (un)successfully tried to get authenticated. Its very important for us as we are getting lots of failed authentication entries, using randon usernames on one of our devices. But we are unabe to trace the source of this attack.

Any help is resolving the issue will be highly appreciated.

Thanks,

Abu Bucker

[jchristvnet]

Hi,

I am using ACS 5.1.0.44-4 and I do get that information (see attached), do you think that you could upgrade your server?

HTH

Christophe

[abu_bucker]

Hi,

Thanks for the clue. I checked the release notes and found the bug id CSCtd37384 ACS View does not display "Remote Address". and this bug has been fixed in 5.1.0.44.2 .

So, I have no option but to upgrade my ACS code.

Thanks,

Abu Bucker