No Remote Address in rejected TACACS attempts

[Cisco Freak]

Hi All,

I was reviewing the TACACS authentication reports in ACS5.8. I see a lot of rejected authentication attempts from an user account.

But when I look into the TACACS Authentication Details, I don't see a remote IP address which is sourcing the authentication request. I am confused about from where the authentication attempts are coming.

Please check the attached screenshot

CF

[Cisco Freak]

Any help would be appreciated.

CF

[nspasov]

Is it possible he/she is doing this via console? :)

Thank you for rating helpful posts!

[Cisco Freak]

There is no device connected to console. Confusing!!