ACS5.X-AD-tacacs+ authentication
Tacacs+ ACS
R1#==tacacs+====by = acs===
R1#
AAA/BIND (0000000C): Bind iUnip f
AAA/AUTHEN/LOGIN (0000000C): Pick method list 'default'
.May 2 10:34:38.973: TPLUS: Queuing AAA Authentication request 12 for processing
.May 2 10:34:38.977: TPLUS: processing authentication start request id 12
.May 2 10 3415 38.981: TPLUS: Authentication start packet created for 12 ()
.May 2 10:34:38.981: TPLUS: Using server 192.168.159.yyy
.May 2 10 Started 34 38.989: TPLUS (0000000C) / 0/NB_WAIT/63DB51E0: Started 5 sec timeout
TPLUS (0000000C) / 0/NB_WAIT: socket event 2
.May 2 10 seq 34 type 39.033: titled: Version 192 (0xC0), May 1, seq 1, encryption 1
.May 2 10 dlen 34 dlen 39.033: tipped: session_id 2736838980 (0xA320D944), May 26 (0x1A)
.May 2 10 3414 39.033: tipped: type:AUTHEN/START, priv_lvl:1 action:LOGIN ascii
.May 2 10 raddr_len:13 34 0xD 39.033: tipped: svc:LOGIN user_len:0 port_len:5 (0x5) raddr_len:13 (0xD) data_len:0
.May 2 10 3414 39.037: tipped: user:
.May 2 10 34 14 39.037: titled: port: tty66
.May 2 10 34 14 39.037: titled: rem_addr: 192.168.159.xxx
.May 2 10 3414 39.037: tipped: data:
.May 2 10 34 14 39.037: tipped: End Packet
.May 2 10 wrote entire 34) 39.041: TPLUS (0000000C) / 0/NB_WAIT: wrote entire 38 bytes request
.May 2 10 socket event 34 socket event 39.045: TPLUS (0000000C) / May:
TPLUS (0000000C) / 0/READ: Would block while reading
.May 2 10 socket event 34: 39.053: TPLUS (0000000C) / 0/READ: socket event 1
.May 2 10 read entire 34 header bytes 39.053: TPLUS (0000000C) / 0/READ: read entire 12 header bytes (expect 16 bytes data)
.May 2 10 socket event 34: 39.053: TPLUS (0000000C) / 0/READ: socket event 1
.May 2 10 read entire 34 bytes response 39.053: TPLUS (0000000C) / 0/READ: read entire 28
.May 2 10 type 34 seq 39.057: titled: Version 192 (0xC0), May 1, seq 2, encryption 1
.May 2 10 dlen 34 dlen 39.057: tipped: session_id 2736838980 (0xA320D944), May 16 (0x10)
.May 2 10 3414 39.057: AUTHEN/REPLY status:4 flags:0x0 msg_len:10, data_len:0
.May 2 10 3414 39.057: tipped: msg: username:
.May 2 10 3414 39.057: tipped: data:
.May 2 10 34 14 39.057: tipped: End Packet
TPLUS (0000000C) / 0/63DB51E0: Processing the reply packet
TPLUS: Received authen response status GET_USER (7)
R1#
R1#
-- type-user--
.May 2 10:34:46.917: TPLUS: Queuing AAA Authentication request 12 for processing
.May 2 10:34:46.921: TPLUS: processing authentication continue request id 12
.May 2 10:34:46.921: TPLUS: Authentication continue packet generated for 12
.May 2 10 Started 34 sec timeout 46.925: TPLUS (0000000C) / 0/WRITE/63DB51E0: Started 5 sec timeout
.May 2 10 seq 34 seq 46.925: tipped: Version 192 (0xC0), type 1, seq 3, encryption 1
Session_id 2736838980 (0xA320D944), dlen 14 (0xE)
.May 2 10 data_len:0 34 flags:0x0 46.925: titled: AUTHEN/CONT msg_len:9 (0x9), data_len:0 (0x0)
.May 2 10 14 14 14 46.925: titled: User msg:
.May 2 10 14 14 14 46.925: titled: User data:
.May 2 10 3414 46.929: titled: End Packet
.May 2 10 wrote entire 34 bytes request 46.929: TPLUS (0000000C) / 0/WRITE: wrote entire 26
.May 2 10 socket event 34: 46.937: TPLUS (0000000C) / 0/READ: socket event 1
.May 2 10 read entire 34 header bytes 46.937: TPLUS (0000000C) / 0/READ: read entire 12 header bytes (expect 16 bytes data)
.May 2 10 socket event 34: 46.941: TPLUS (0000000C) / 0/READ: socket event 1
.May 2 10 read entire 34 bytes response 46.941: TPLUS (0000000C) / 0/READ: read entire 28
.May 2 10 seq 34 seq 46.941: tipped: Version 192 (0xC0), type 1, seq 4, encryption 1
Session_id 2736838980 (0xA320D944), dlen 16 (0x10)
.May 2 10 3414 46.941: AUTHEN/REPLY status:5 flags:0x1 msg_len:10, data_len:0
.May 2 10 msg 34: 46.945: tipped: msg: password:
.May 2 10 34 14: 46.945: tipped: data:
.May 2 10 34 14 46.945: titled: End Packet
TPLUS (0000000C) / 0/63DB51E0: Processing the reply packet
TPLUS: Received authen response status GET_PASSWORD (8)
R1#
R1#
R1#
Ringing-- type-passwd--
R1#
.May 2 10:34:58.369: TPLUS: Queuing AAA Authentication request 12 for processing
.May 2 10:34:58.373: TPLUS: processing authentication continue request id 12
.May 2 10:34:58.377: TPLUS: Authentication continue packet generated for 12
.May 2 10 Started 34 sec timeout 58.377: TPLUS (0000000C) / 0/WRITE/63DB51E0: Started 5
.May 2 10 type 34 encryption 58.377: tipped: Version 192 (0xC0), May 1, seq 5, May 1
.May 2 10 dlen 34. 58. 377: session_id 2736838980 (0xA320D944), May 21 (0x15).
.May 2 10 data_len:0 34 0x0 58.377: tipped: AUTHEN/CONT msg_len:16 (0x10), data_len:0 (0x0) flags:0x0
.May 2 10 34 14 58. 381: tipped: User msg:
.May 2 10 34 14 58. 381: tipped: User data:
.May 2 10 34 14 58. 381: tipped: End Packet
R1#
TPLUS (0000000C) / 0/WRITE: wrote entire 33 bytes request
.May 2 10 socket event 34R 58.429: TPLUS (0000000C) / 0/READ: socket event 1
.May 2 10 read entire 34R 58.433: TPLUS (0000000C) / 0/READ: read entire 12 header bytes (expect 6 bytes data)
TPLUS (0000000C) / 0/READ: socket event 1
.May 2 10 read entire 34 bytes response 58.433: TPLUS (0000000C) / 0/READ: read entire 18
.May 2 10 type 34 encryption 58.437: tipped: Version 192 (0xC0), May 1, seq 6, May 1
.May 2 10 dlen 34R 58.437: tipped: session_id 2736838980 (0xA320D944), dlen 6 (0x6)
.May 2 10 34 14 58. 437: AUTHEN/REPLY status:1 flags:0x0 msg_len:0, data_len:0
.May 2 10 34 14 58. 437: tipped: msg:
.May 2 10 34 14 58. 437: tipped: data:
.May 2 10 34 14 58. 437: tipped: End Packet
.May 2 10 Processing the reply packet 34R 58.441: TPLUS (0000000C) / Processing the reply packet
TPLUS: Received authen response status PASS (2)
.May 2 10 type 34 14 58 50 9: Version 192 (0xC0), May 2
R1#seq 1, encryption 1
.May 2 10 dlen 34 0x36 58.509: tipped: session_id 613042473 (0x248A4929), May 54 (0x36)
.May 2 10 authen:1 method:tacacs+ 34R 58.509: tipped: AUTHOR, priv_lvl:1, authen:1 method:tacacs+
.May 2 10 3414 58. 509: tipped: svc:1 user_len:9 port_len:5 rem_addr_len:13 arg_cnt:2
.May 2 10 34R 58.513: tipped: user: adminuser
.May 2 10 34R 58.513: tipped: port: tty66
.May 2 10 34R 58.513: tipped: rem_addr: 192.168.159.xxx
.May 2 10 34R 58.513: tipped: arg [0]: size:13 service=shell
.May 2 10 34R 58.513: tribute: arg [1]: size:4 cmd*
.May 2 10 3414 58. 517: tipped: End Packet
Type 2, seq 2, encryption 1, May 2, May 2, May 2
.May 2 10 dlen 34R 58.529: tipped: session_id 613042473 (0x248A4929), dlen 18 (0x12)
.May 2 10 34 14 58. 529: AUTHOR/REPLY status:1 msg_len:0, data_len:0 arg_cnt:1
.May 2 10 34R 58.533: tipped: msg:
.May 2 10 34R 58.533: tipped: data:
.May 2 10 34R 58.533: tipped: arg [0] size:11
.May 2 10 3414 58. 533: tipped: priv-lvl=15
.May 2 10 3414 58. 533: tipped: End Packet
R1#
R1
Ringing-telnet-show run-sh ip int bri-
R1#
R1#
.May 2 10:35:11.801: AAA: parse name=tty66 idb type=-1 tty=-1
.May 2 10:35:11.805: AAA: name=tty66 flags=0x11 type=5 shelf=0 slot=0 adapter=0 port=66 channel=0
.May 2 10 0x639B27A8 35 user='adminuser' ruser='R1' ds0=0 port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=15 initial_task_id='0', vrf= 11.805: AAA/MEMORY: create_user (0x639B27A8)
.May 2 10 35 12. 029: TAC+: (2043416142): received author response status = PASS_ADD
.May 2 10 0x639B27A8 35 12. 033: AAA/MEMORY: free_user (0x639B27A8) user='adminuser' ruser='R1' port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=15 vrf= (id=0)
R1#
.May 2 10:35:20.181: AAA: parse name=tty66 idb type=-1 tty=-1
.May 2 10:35:20.181: AAA: name=tty66 flags=0x11 type=5 shelf=0 slot=0 adapter=0 port=66 channel=0
.May 2 10 0x63E5A84C 35 20. 185: AAA/MEMORY: create_user (0x63E5A84C) user='adminuser' ruser='R1' ds0=0 port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=1 initial_task_id='0', vrf= (id=0)
.May 2 10 PASS_ADD 35 PASS_ADD 20. 405: TAC+: (- 1481682141):
.May 2 10 0x63E5A84C 35 user='adminuser' ruser='R1' port='tty66' rem_addr='192.168.159.1' authen_type=ASCII service=NONE priv=1 vrf= 20.409: AAA/MEMORY: free_user (0x63E5A84C)
R1#
