Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k

CW2000 admin user trying to authenticate

I've configured TACACS+ login module for my CW2000, defined my user account and not using admin user anymore.

But looking to my TACACS server log I can see admin user trying to authenticate several a day (different times, but always 00:17 a.m.).

Is the admin user account used internally in CW2000 or there is an intruder in my network?

Regards,

Milan

2 REPLIES
Blue

Re: CW2000 admin user trying to authenticate

The username admin is reserved and cannot be deleted. If no one use using admin to login to CW2K then it should not happen. Are you sure that no one is using admin to login?

Re: CW2000 admin user trying to authenticate

Hi,

I've just found what the problem is: I've enabled device synchronization from ANI server to RME. I'm using admin user to connect to RME and I'm not able to provide TACACS+ dynamic password for this purpose, so it falls to admin local login which passes OK finally.

So the final question is:

Do I have to use admin user for this device sync while running ANI and RME on the same machine? Isn't it possible to run it without user login?

Regards,

Milan

96
Views
0
Helpful
2
Replies
CreatePlease to create content