Example 78 debug aaa authentication Command Output

Router# debug aaa authentication

2:13:51: AAA/AUTHEN: create_user user='' ruser='' port='tty19' rem_addr='192.168.100 . 14 ' authen_type=1 service=1 priv=1

2

13

51

AAA/AUTHEN/START (0): port='tty19' list='' action=

LOGIN service

2

13

51

AAA/AUTHEN/START (0): using "default" list

2

13

51

AAA/AUTHEN/START (35149617): Method=TACACS+

2

13

51

TAC+ (35149617): received authen response status =

GETUSER

2

13

51

AAA/AUTHEN (35149617): status = GETUSER

2:

13

51:

AAA/AUTHEN/CONT (35149617) : continue login

2:

13

51:

AAA/AUTHEN (35149617): status = GETUSER

2:

13

51:

AAA/AUTHEN (35149617) : Method=TACACS +

2:

13

51:

TAC+: send AUTHEN/CONT packet

2:

13

51:

TAC+ (35149617): received authen response status =

GETPASS

2:

13

51:

AAA/AUTHEN (35149617): status = GETPASS

2:

13

51:

AAA/AUTHEN/CONT (35149617) : continue login

2:

13

51:

AAA/AUTHEN (35149617): status = GETPASS

2:

13

51:

AAA/AUTHEN (35149617) : Method=TACACS +

2:

13

51:

TAC+: send AUTHEN/CONT packet

2:

13

51:

TAC+ (35149617): received authen response status =

PASS

2:

13

51:

AAA/AUTHEN (35149617) : status = PASS

Example 7-9 shows sample output from the debug aaa authorization command. In this display, an EXEC authorization for user Howard is performed. On the first line, the username is authorized. On the second and third lines, the attribute value (AV) pairs are authorized. The debug output displays a line for each AV pair that is authenticated. Next, the display indicates the authorization method used. The final line in the display indicates the status of the authorization process, which in this case has failed.

Was this article helpful?

0 0

Post a comment