Cisco ACS and Ciscoworks failed attempts issue

[mbaylis]

Hi

We have been using Ciscoworks to collect switch/router configurations for a number of years. Since we implemented ACS V3.3 we have been getting problems with failed logins.

After looking at the failed attempt logs we see spurious logins like "q" or even spurious letters inserted at the beginning of the username like "tlogin" from the ciscoworks server. It's not all devices we have this problem on only a small selection. It does appear these devices are behind firewalls and maybe it os a timeout issue.

We tried running the ciscoworks collected of the configs at different times during the days and get the same issue. Has anyone else come across this problems?

Thanks

Martin

[darpotter]

Hi

From my days of doing escalated ACS support I remember seeing all sorts of rubbish in TACACS+ traffic. Ususally the username would contain random bits of the memory from the issueing device.

You'll need to raise a TAC case to get a bug fix from the Ciscoworks people.

Darran