07-30-2017 11:00 PM
Hello Team, we observe huge number of authentication attempts from Cisco Prime Infrastructure (~28k per day). So anyone please confirm why is it so?
07-30-2017 11:23 PM
- Were and how are you observing this ? (Provide a screenshot (e.g.))
M.
07-30-2017 11:32 PM
Hello Marce,
Our customer is observing this on TACAS server, as per my understanding prime login in devices for restoring the backup & we have approx. 14000 inventory. We had enabled backup of devices background task & schedule it for every day. But still login attempts are 28000 on each day is a concern. Kindly help 7 revert on earliest.
07-31-2017 12:05 AM
- Examine, the tacas alert-entry in detail; if it comes from a switch then it could be that the switch or even a number of switches were entered with wrong access-credentials in Prime; if so they should be removed from prime and re-entered again with the correct credentials. If the tacas alert-entries come from the Prime server itself; then it's less clear for me.
M.
07-31-2017 12:26 AM
Hello Marce,
Yes, we have switches with Wrong CLI credentials but very few, can you please confirm how this few switches will may lead to this many login attempts. Or is this any more possibilities for the same.
07-31-2017 12:36 AM
Hmm, that's very difficult to asses , there it might be due to background actions of Prime, which are not always visible to the end user. I would strongly suggest to enter all switches with correct credentials in Prime. If that is not possible ; remove the 'bad' switches. Check if the errors on the tacas server persist,
M.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: