07-15-2015 11:29 AM - last edited on 03-25-2019 04:34 PM by ciscomoderator
Hello,
We have an issue with the logging in a 2960 stack. Actually we have the same problem on 3 different stack (same IOS version, same models)
As you can see below the source appear illegible. They appear in the same format on our syslog server too.
Anyone have an idea of what can be the source of this issue ?
Jul 15 10:37:34.623 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxx] [Source: ghijklmnopqrstuvwxyz{|}^@^A^B^C^D^E^F ^K^L ^N^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{] [localport: 22] at 10:37:34 EDT Wed Jul 15 2015 Jul 15 10:38:52.053 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxx] [Source: ghijklmnopqrstuvwxyz{|}^@^A^B^C^D^E^F ^K^L ^N^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{] [localport: 22] at 10:38:52 EDT Wed Jul 15 2015 Jul 15 10:39:56.635 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxx] [Source:^@^A^B^C^D^E^F ^K^L ^N^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{] [localport: 22] at 10:39:56 EDT Wed Jul 15 2015 Jul 15 10:45:18.809 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxxx] [Source: LMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}^@^A^B^C^D^E^F ^K^L
Switch Ports Model SW Version SW Image ------ ----- ----- ---------- ---------- * 1 52 WS-C2960X-48FPD-L 15.0(2a)EX5 C2960X-UNIVERSALK9-M 2 52 WS-C2960X-48FPD-L 15.0(2a)EX5 C2960X-UNIVERSALK9-M 3 52 WS-C2960X-48FPD-L 15.0(2a)EX5 C2960X-UNIVERSALK9-M 4 52 WS-C2960X-48FPD-L 15.0(2a)EX5 C2960X-UNIVERSALK9-M
08-18-2015 08:17 PM
I have the same problem on a single 2960X switch. It's a brand new switch running 15.0(2a)EX5. My biggest problem is that if you attempt to telnet/ssh to the switch from a PC with a 172.x.x.x address, it will cause the switch to crash within seconds. You don't even have to enter a valid username to make it crash. To resolve the crash issue, I disabled the login logging. But now I don't have a record of login attempts. I haven't tried a newer IOS version yet because the switch is in production and 3,000 miles away. I've never had this issue with any other Cisco switch model.
01-14-2016 10:14 AM
We have the same problems with 2960X-48FPS-L and IOS 15.0(2a)EX5
-login message source IP is garbled
-switch crash and reboot if login from source IP 172.x.x.x (no crash if source IP is 10.x.x.x)
04-30-2018 10:00 AM
Same issue here.
Have there been any updates regarding this issue?
thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide