Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ACS 5.0 report: user's ip address information not available

Hi,

I am using ACS 5.0 for TACACS+ Authentication and Accounting.

I am facing an issue related to reports.

When I click the detail for any failed / passed authentication entry on AAA Protocol > TACACS+ Authentication page, The remote address (under user, just below the username filed) field is empty. The screen shot is attached herewith for reference.

How can I get the remote ip address of the user who (un)successfully tried to get authenticated. Its very important for us as we are getting lots of failed authentication entries, using randon usernames on one of our devices. But we are unabe to trace the source of this attack.


Any help is resolving the issue will be highly appreciated.

Thanks,

Abu Bucker

2 REPLIES
New Member

Re: ACS 5.0 report: user's ip address information not available

Hi,

I am using ACS 5.1.0.44-4 and I do get that information (see attached), do you think that you could upgrade your server?

HTH

Christophe

New Member

Re: ACS 5.0 report: user's ip address information not available

Hi,

Thanks for the clue. I checked the release notes and found the bug id CSCtd37384 ACS View does not display "Remote Address". and this bug has been fixed in 5.1.0.44.2 .

So, I have no option but to upgrade my ACS code.

Thanks,

Abu Bucker

392
Views
0
Helpful
2
Replies
CreatePlease to create content