Hi
I use 2901 router as console server (ver 15.0(1r)M15)
It has serial module installed with many connected devices (cisco routers, switches, juniper routers etc)
I recently noticed a large number of messages such as:
072176: Apr 23 17:08:22.349 VLAT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 0.0.0.0] [localport: 0] [Reason: Login Authentication Failed] at 17:08:22 VLAT Tue Apr 23 2013
072177: Apr 23 17:08:26.557 VLAT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ^] [Source: 0.0.0.0] [localport: 0] [Reason: Login Authentication Failed] at 17:08:26 VLAT Tue Apr 23 2013
072178: Apr 23 17:08:47.165 VLAT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ot@srx650# *] [Source: 0.0.0.0] [localport: 0] [Reason: Login Authentication Failed] at 17:08:47 VLAT Tue Apr 23 2013
072179: Apr 23 17:08:51.373 VLAT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: 7206 ] [Source: 0.0.0.0] [localport: 0] [Reason: Login Authentication Failed] at 17:08:51 VLAT Tue Apr 23 2013
Such log messages appear every few seconds.
Why is this happening?
Config:
aaa new-model
!
aaa authentication login CONSOLE local
!
...
ip host Port0 2003 10.0.0.2
ip host Port1 2004 10.0.0.2
ip host Port2 2005 10.0.0.2
!
...
username CONSOLE secret 4 tnshtc92DsdhsdysdtysrXBh
!
...
interface Async0/0/0
no ip address
encapsulation slip
shutdown
!
...
line 0/0/0 0/0/15
exec-timeout 180 0
login authentication CONSOLE
transport input telnet
transport output telnet
and other default settings
