Sensor 4215 strange login behaviour

[tamer]

When I try login to the cisco IDS sensor 4215 I write the correct login and password but it doesn't login me to the prompt , instead it asks again for the login after displaying the disclaimer.

-----------------------------------------

sensor login: cisco

Password:

***NOTICE***

This product contains cryptographic features and is subject to United States

and local country laws governing import, export, transfer and use. Delivery

of Cisco cryptographic products does not imply third-party authority to import,

export, distribute or use encryption. Importers, exporters, distributors and

users are responsible for compliance with U.S. and local country laws. By using

this product you agree to comply with applicable laws and regulations. If you

are unable to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto

If you require further assistance please contact us by sending email to

export@cisco.com.

sensor login:

-----------------------------------------

And I am sure the password is correct , as when I try wrong password I get message like this :

-----------------------------------------

sensor login: cisco

Password:

Login incorrect

-----------------------------------------

Can anyone help me to resolve this ? thanks in advance.

[jamesand]

Here a few things to try ...

1) if you are running 4.1(X) you could be hitting a known HDD issue where the sensor (authentication process) can behave strangely. If this were the case, you should power off the sensor for 20 min and then power back up to see if problem goes away.

2) attach a console terminal and attempt the login - you might get more clues (error messages that will be saved in the console window)

3) if you have a service account, log in and see if there are any clues in the syslog:

- "su" to root (same PW as svc acct PW)

- tail -100 /var/log/messages

[tamer]

I have tried what u said:

point 1) didn't help after I tried it.

point 2) I watch the console while booting and here is the last lines displayed on the console screen before login.

-------------------------------------------

Hint: You are trying to load a module without a GPL compatible license and it has unresolved symbols. Contact the module supplier for assistance, only they can help you.

[FAILED]

Creating boot.info[ OK ]

Checking for system modifications since last boot[ OK ]

Checking model identification[ OK ]

Model: IDS-4215

Error: mainApp did not start

sensor Login :

-------------------------------------------

I think I will have to get back to my supplier.

[mhellman]

I don't believe you can login as cisco with mainApp being down (http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_installation_and_configuration_guide_chapter09186a00803580db.html#wp916078).

If you have a service account, you can login with it. Otherwise, you might try booting off the recovery image. During the boot process, you can select to boot off the recovery image partition. You'll lose most of your configuration, except the network settings.

[tamer]

This recovery image is a bootable CD or built-in on the box? If it is CD I can download from cisco site or should obtain from the provider ?

[mhellman]

The recovery image is a bootable partition on the hard drive. There is a recovery CD as well, but I'm not sure about the 4215. It's the only sensor I don't have. For all the other 42xx models, you have to load an image via tftp.

Try this link:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008045a95f.html#wp1030874