find IP addrees of unknown user

[ozlemduran]

hi,

I want to find the IP adress of an unknown user, because he/she trying to make a connection a lot of times, and this is making my log file bigger.

is anybody know the answer?

thanks

[ozlemduran]

sorry,

I m using ACS3.1,radius (IOS&PIX) and my NAS is PIX FIREWALL

[chandlerbr]

I assume you are referring to the "Failed Attempts" log.

Log into your ACS server

go to System Configuration --> Logging -- > CSV Failed Attempts

Then in the Select Columns to Log section,

make sure Caller-ID is in the Logged Attributes column on the right side.

The Caller-ID in the Failed Attempts logg will be the IP or MAC address of the offending user.

hth

[ozlemduran]

Hi thanks for your answer,

but Caller-ID is at the right column and still I cant see the IP add. or mac addr.

[chandlerbr]

Are any of the fields being populated? Can you post your AAA configuration?

thanks