Dépannage du proxy d'authentification

Options de téléchargement

PDF (219.1 KB)
Consulter à l'aide d'Adobe Reader sur un grand nombre d'appareils
ePub (86.2 KB)
Consulter à l’aide de différentes applications sur iPhone, iPad, Android ou Windows Phone
Mobi (Kindle) (81.9 KB)
Consulter sur un appareil Kindle ou à l’aide d’une application Kindle sur plusieurs appareils

Mis à jour:14 janvier 2008

ID du document:13896

Langage exempt de préjugés

Dans le cadre de la documentation associée à ce produit, nous nous efforçons d’utiliser un langage exempt de préjugés. Dans cet ensemble de documents, le langage exempt de discrimination renvoie à une langue qui exclut la discrimination en fonction de l’âge, des handicaps, du genre, de l’appartenance raciale de l’identité ethnique, de l’orientation sexuelle, de la situation socio-économique et de l’intersectionnalité. Des exceptions peuvent s’appliquer dans les documents si le langage est codé en dur dans les interfaces utilisateurs du produit logiciel, si le langage utilisé est basé sur la documentation RFP ou si le langage utilisé provient d’un produit tiers référencé. Découvrez comment Cisco utilise le langage inclusif.

À propos de cette traduction

Cisco a traduit ce document en traduction automatisée vérifiée par une personne dans le cadre d’un service mondial permettant à nos utilisateurs d’obtenir le contenu d’assistance dans leur propre langue. Il convient cependant de noter que même la meilleure traduction automatisée ne sera pas aussi précise que celle fournie par un traducteur professionnel.

Contenu

Introduction

Conditions préalables

Conditions requises

Components Used

Conventions

Commandes debug et clear

Commande show ip access-lists - Outbound

Déboguages

Bon débogage de routeur - TACACS - Sortant

Bon débogage du routeur - RADIUS - Sortant

Problèmes potentiels

Serveur RADIUS inaccessible

Le serveur TACACS est inaccessible

L'utilisateur RADIUS entre un nom d'utilisateur ou un mot de passe incorrect

L'utilisateur TACACS entre un nom d'utilisateur ou un mot de passe incorrect

L'utilisateur TACACS entre un nom d'utilisateur et un mot de passe corrects, mais ne dispose pas d'autorisation

L'utilisateur RADIUS entre un nom d'utilisateur et un mot de passe corrects, mais la liste de contrôle d'accès renvoie au format non valide

L'utilisateur TACACS entre un nom d'utilisateur et un mot de passe corrects, mais la liste de contrôle d'accès renvoie au format non valide

L'utilisateur RADIUS entre un nom d'utilisateur et un mot de passe corrects, mais Priv-lvl 15 non retourné

L'utilisateur TACACS entre le nom d'utilisateur et le mot de passe corrects, mais Priv-lvl 15 non retourné

Informations connexes

Introduction

Ce document définit et présente les mécanismes de dépannage disponibles dans Cisco IOS^® pour résoudre les problèmes liés au proxy d'authentification (Auth-Proxy). Ce document définit les commandes debug et show, puis illustre des exemples de ces débogages et commandes.

Conditions préalables

Conditions requises

Aucune spécification déterminée n'est requise pour ce document.

Components Used

Ce document n'est pas limité à des versions de matériel et de logiciel spécifiques.

Conventions

For more information on document conventions, refer to the Cisco Technical Tips Conventions.

Commandes debug et clear

Avant d'essayer l'une des commandes debug, consultez Informations importantes sur les commandes Debug.

debug tacacs | radius - Affiche les informations associées à TACACS ou RADIUS.
debug aaa authentication - Affiche des informations sur l'authentification AAA/TACACS+. Utilisé pour voir quelles méthodes d'authentification sont utilisées et quels sont les résultats de ces méthodes.
debug aaa Authorization - Affiche des informations sur l'autorisation AAA/TACACS+. Utilisé pour voir quelles méthodes d'autorisation sont utilisées et quels sont les résultats de ces méthodes.

Si nécessaire, utilisez les commandes suivantes :

debug ip auth-proxy {function - trace} - Affiche les fonctions du proxy d'authentification.
debug ip auth-proxy {http} - Affiche les événements HTTP liés au proxy d'authentification.

Pour effacer entre les sessions, utilisez cette commande :

clear ip auth-proxy cache {* | host ip address} - Efface toutes les entrées du proxy d'authentification, y compris les profils utilisateur et les listes de contrôle d'accès dynamiques. Si l'adresse IP est spécifiée, elle efface l'entrée du proxy d'authentification pour l'hôte spécifié.

Commande show ip access-lists - Outbound

Avant que la commande access-list ne soit transmise :

sec-3640#show ip access-lists       
Extended IP access list 116
    permit tcp host 10.31.1.47 host 10.31.1.150 eq www
    deny tcp host 10.31.1.47 any (16 matches)
    deny udp host 10.31.1.47 any (26 matches)
    deny icmp host 10.31.1.47 any
    permit tcp 10.31.1.0 0.0.0.255 any (53 matches)
    permit udp 10.31.1.0 0.0.0.255 any (74 matches)
    permit icmp 10.31.1.0 0.0.0.255 any
    permit icmp 171.68.118.0 0.0.0.255 any
    permit tcp 171.68.118.0 0.0.0.255 any (242 matches)
    permit udp 171.68.118.0 0.0.0.255 any

Une fois la commande access-list passée :

Extended IP access list 116
    permit udp host 10.31.1.47 any (3 matches) <  added by authproxy 
    permit tcp host 10.31.1.47 any <  added by authproxy 
    permit icmp host 10.31.1.47 any < added by authproxy 

    permit tcp host 10.31.1.47 host 10.31.1.150 eq www
    deny tcp host 10.31.1.47 any (18 matches)
    deny udp host 10.31.1.47 any (26 matches)
    deny icmp host 10.31.1.47 any
    permit tcp 10.31.1.0 0.0.0.255 any (53 matches)
    permit udp 10.31.1.0 0.0.0.255 any (74 matches)
    permit icmp 10.31.1.0 0.0.0.255 any
    permit icmp 171.68.118.0 0.0.0.255 any
    permit tcp 171.68.118.0 0.0.0.255 any (264 matches)
    permit udp 171.68.118.0 0.0.0.255 any

Déboguages

Bon débogage de routeur - TACACS - Sortant

00:32:30: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:30: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:30: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:30:  F ack 1260991237 seq 410073(0)
00:32:30: dst_addr 185273100 src_addr 169804079 DST_port 80 src_port 4521
00:32:30: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:30: AUTH_PROXY: not a SYN packet
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:32:  F ack 1260991237 seq 410073(0)
00:32:32: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4521
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH_PROXY: not a SYN packet
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_if_marked_for_proxy
00:32:32: AUTH-PROXY FUNC: auth_proxy_get_idbsb
00:32:32: AUTH-PROXY FUNC: auth_proxy_find_aprt_of_aprc_by_protocol
00:32:32: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:32:  S seq 410077(0)
00:32:32: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4535
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_if_marked_for_proxy
00:32:32: AUTH-PROXY FUNC: auth_proxy_get_idbsb
00:32:32: AUTH-PROXY FUNC: auth_proxy_find_aprt_of_aprc_by_protocol
00:32:32: AUTH-PROXY FUNC: auth_proxy_new_connection
00:32:32: AUTH-PROXY FUNC: auth_proxy_add_conn_info
00:32:32: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:32:  ack 2957488078 seq 410078(0)
00:32:32: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4535
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: clientport 4535 state 0
00:32:32: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:32:  P ack 2957488078 seq 410078(290)
00:32:32: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4535
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: clientport 4535 state 0
00:32:32: AUTH-PROXY FUNC: auth_proxy_find_cache
00:32:32: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_wait_for_next_pwd
00:32:32: AUTH-PROXY FUNC: auth_proxy_received_get
00:32:32: AUTH-PROXY FUNC: auth_proxy_find_cache
00:32:32: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_save_timestamp
00:32:32: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:32:  ack 2957489275 seq 410368(0)
00:32:32: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4535
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: clientport 4535 state 0
00:32:32: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:32:  F ack 2957489275 seq 410368(0)
00:32:32: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4535
00:32:32: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:32: clientport 4535 state 0
00:32:36: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:36: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:36:  F ack 1260991237 seq 410073(0)
00:32:36: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4521
00:32:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:36: clientport 4535 state 0
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:45: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:45:  S seq 410193(0)
00:32:45: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4542
00:32:45: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:45: clientport 4521 state 0
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:45: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:45:  ack 2970312961 seq 410194(0)
00:32:45: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4542
00:32:45: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:45: clientport 4542 state 0
00:32:45: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:45:  P ack 2970312961 seq 410194(449)
00:32:45: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4542
00:32:45: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:45: clientport 4542 state 0
00:32:45: AUTH-PROXY FUNC: auth_proxy_find_cache
00:32:45: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:45: AUTH-PROXY FUNC: auth_proxy_required_reauth
00:32:45: AUTH-PROXY FUNC: auth_proxy_same_timestamp
00:32:45: AUTH-PROXY FUNC: auth_proxy_wait_for_next_pwd
00:32:45: AAA: parse name=a} idb type=-1 tty=-1
00:32:45: AAA/MEMORY: create_user (0x61C23FE4) user='' ruser='' 
port='a}' rem_addr='' authen_type=ASCII service=LOGIN priv=0
00:32:45: AAA/AUTHEN/START (3351494599): port='a}' list='default' 
action=LOGIN service=LOGIN
00:32:45: AAA/AUTHEN/START (3351494599): found list default
00:32:45: AAA/AUTHEN/START (3351494599): Method=RTP (tacacs+)
00:32:45: TAC+: send AUTHEN/START packet ver=192 id=3351494599
00:32:45: TAC+: Using default tacacs server-group "RTP" list.
00:32:45: TAC+: Opening TCP/IP to 171.68.118.84/49 timeout=5
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: TAC+: Opened TCP/IP handle 0x61CA39A0 to 171.68.118.84/49
00:32:45: TAC+: 171.68.118.84 (3351494599) AUTHEN/START/LOGIN/ASCII queued
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: TAC+: (3351494599) AUTHEN/START/LOGIN/ASCII processed
00:32:45: TAC+: ver=192 id=3351494599 received AUTHEN status = GETUSER
00:32:45: AAA/AUTHEN (3351494599): status = GETUSER
00:32:45: AAA/AUTHEN/CONT (3351494599): continue_login (user='(undef)')
00:32:45: AAA/AUTHEN (3351494599): status = GETUSER
00:32:45: AAA/AUTHEN (3351494599): Method=RTP (tacacs+)
00:32:45: TAC+: send AUTHEN/CONT packet id=3351494599
00:32:45: TAC+: 171.68.118.84 (3351494599) AUTHEN/CONT queued
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: TAC+: (3351494599) AUTHEN/CONT processed
00:32:45: TAC+: ver=192 id=3351494599 received AUTHEN status = GETPASS
00:32:45: AAA/AUTHEN (3351494599): status = GETPASS
00:32:45: AAA/AUTHEN/CONT (3351494599): continue_login (user='proxyonly')
00:32:45: AAA/AUTHEN (3351494599): status = GETPASS
00:32:45: AAA/AUTHEN (3351494599): Method=RTP (tacacs+)
00:32:45: TAC+: send AUTHEN/CONT packet id=3351494599
00:32:45: TAC+: 171.68.118.84 (3351494599) AUTHEN/CONT queued
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: TAC+: (3351494599) AUTHEN/CONT processed
00:32:45: TAC+: ver=192 id=3351494599 received AUTHEN status = PASS
00:32:45: AAA/AUTHEN (3351494599): status = PASS
00:32:45: TAC+: Closing TCP/IP 0x61CA39A0 connection to 171.68.118.84/49
00:32:45: a} AAA/AUTHOR/HTTP (4113551585): Port='a}' list='default'
 service=AUTH-PROXY
00:32:45: AAA/AUTHOR/HTTP: a} (4113551585) user='proxyonly'
00:32:45: a} AAA/AUTHOR/HTTP (4113551585): send AV service=auth-proxy
00:32:45: a} AAA/AUTHOR/HTTP (4113551585): send AV cmd*
00:32:45: a} AAA/AUTHOR/HTTP (4113551585): found list "default"
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: a} AAA/AUTHOR/HTTP (4113551585): Method=RTP (tacacs+)
00:32:45: AAA/AUTHOR/TAC+: (4113551585): user=proxyonly
00:32:45: AAA/AUTHOR/TAC+: (4113551585): send AV service=auth-proxy
00:32:45: AAA/AUTHOR/TAC+: (4113551585): send AV cmd*
00:32:45: TAC+: using previously set server 171.68.118.84 from group RTP
00:32:45: TAC+: Opening TCP/IP to 171.68.118.84/49 timeout=5
00:32:45: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:45: TAC+: Opened TCP/IP handle 0x61CA3E1C to 171.68.118.84/49
00:32:45: TAC+: Opened 171.68.118.84 index=1
00:32:45: TAC+: 171.68.118.84 (4113551585) AUTHOR/START queued
00:32:46: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:46: TAC+: (4113551585) AUTHOR/START processed
00:32:46: TAC+: (4113551585): received author response status = PASS_ADD
00:32:46: TAC+: Closing TCP/IP 0x61CA3E1C connection to 171.68.118.84/49
00:32:46: AAA/AUTHOR (4113551585): Post authorization status = PASS_ADD
00:32:46: AUTH-PROXY FUNC: auth_proxy_copy_attrs
00:32:46: AUTH-PROXY FUNC: auth_proxy_find_cache
00:32:46: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:46: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:46: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:46: AUTH-PROXY FUNC: auth_proxy_find_cache
00:32:46: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:46: AUTH-PROXY FUNC: auth_proxy_http_accept
00:32:46: AUTH-PROXY FUNC: auth_proxy_proc_profile
00:32:46: AUTH-PROXY FUNC: auth_proxy_add_acl_item
00:32:46: AUTH-PROXY FUNC: auth_proxy_add_acl_item
00:32:46: AUTH-PROXY FUNC: auth_proxy_add_acl_item
00:32:46: AUTH-PROXY FUNC: auth_proxy_add_acl_item
00:32:46: AUTH-PROXY FUNC: auth_proxy_add_acl_item
00:32:46: AUTH-PROXY FUNC: auth_proxy_add_acl_item
00:32:46: AAA/MEMORY: free_user (0x61C23FE4) user='proxyonly' 
ruser='' port='a}' rem_addr='' authen_type=ASCII service=LOGIN priv=0
00:32:46: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:46: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:46: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:46: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:46: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:46:  ack 2970313958 seq 410643(0)
00:32:46: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4542
00:32:46: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:46: clientport 4542 state 2
00:32:46: AUTH-PROXY FUNC: auth_proxy_process_path
00:32:46:  F ack 2970313958 seq 410643(0)
00:32:46: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4542
00:32:46: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:46: clientport 4542 state 2
00:32:49: AUTH-PROXY FUNC: auth_proxy_timers
00:32:49: AUTH-PROXY FUNC: auth_proxy_handle_finwait_timeout
00:32:51: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:51: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:51: AUTH-PROXY FUNC: auth_proxy_set_hit
00:32:51: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:51: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:51: AUTH-PROXY FUNC: auth_proxy_set_hit
00:32:51: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:51: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:51: AUTH-PROXY FUNC: auth_proxy_set_hit
00:32:51: AUTH-PROXY FUNC: auth_proxy_fast_path
00:32:51: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
00:32:51: AUTH-PROXY FUNC: auth_proxy_set_hit
00:32:54: AUTH-PROXY FUNC: auth_proxy_fast_path

Bon débogage du routeur - RADIUS - Sortant

01:23:18: AUTH-PROXY FUNC: auth_proxy_destroy_all_conn_info
01:23:18: AUTH-PROXY FUNC: auth_proxy_remove_conn_info
01:23:18: AUTH-PROXY FUNC: auth_proxy_delete_conn_info
01:23:18: AUTH-PROXY FUNC: auth_proxy_remove_all_acl
01:23:21: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:21: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:21: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:21:  F ack 3679167246 seq 413771(0)
01:23:21: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4851
01:23:21: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:21: AUTH_PROXY: not a SYN packet
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_if_marked_for_proxy
01:23:23: AUTH-PROXY FUNC: auth_proxy_get_idbsb
01:23:23: AUTH-PROXY FUNC: auth_proxy_find_aprt_of_aprc_by_protocol
01:23:23: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:23:  S seq 414827(0)
01:23:23: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4943
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_if_marked_for_proxy
01:23:23: AUTH-PROXY FUNC: auth_proxy_get_idbsb
01:23:23: AUTH-PROXY FUNC: auth_proxy_find_aprt_of_aprc_by_protocol
01:23:23: AUTH-PROXY FUNC: auth_proxy_new_connection
01:23:23: AUTH-PROXY FUNC: auth_proxy_add_conn_info
01:23:23: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:23:  ack 1713887638 seq 414828(0)
01:23:23: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4943
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: clientport 4943 state 0
01:23:23: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:23:  P ack 1713887638 seq 414828(290)
01:23:23: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4943
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: clientport 4943 state 0
01:23:23: AUTH-PROXY FUNC: auth_proxy_find_cache
01:23:23: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_wait_for_next_pwd
01:23:23: AUTH-PROXY FUNC: auth_proxy_received_get
01:23:23: AUTH-PROXY FUNC: auth_proxy_find_cache
01:23:23: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_save_timestamp
01:23:23: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:23:  ack 1713888835 seq 415118(0)
01:23:23: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4943
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: clientport 4943 state 0
01:23:23: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:23:  F ack 1713888835 seq 415118(0)
01:23:23: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4943
01:23:23: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:23: clientport 4943 state 0
01:23:24: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:24: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:24: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:24:  F ack 3679167246 seq 413771(0)
01:23:24: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4851
01:23:24: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:24: clientport 4943 state 0
01:23:36: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:36:  S seq 414841(0)
01:23:36: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4944
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: clientport 4851 state 0
01:23:36: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:36:  ack 1726143121 seq 414842(0)
01:23:36: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4944
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: clientport 4944 state 0
01:23:36: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:36:  P ack 1726143121 seq 414842(449)
01:23:36: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4944
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: clientport 4944 state 0
01:23:36: AUTH-PROXY FUNC: auth_proxy_find_cache
01:23:36: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: AUTH-PROXY FUNC: auth_proxy_required_reauth
01:23:36: AUTH-PROXY FUNC: auth_proxy_same_timestamp
01:23:36: AUTH-PROXY FUNC: auth_proxy_wait_for_next_pwd
01:23:36: AAA: parse name=a} idb type=-1 TTY=-1
01:23:36: AAA/MEMORY: create_user (0x61C52DD8) user='' ruser='' port='a}' 
rem_addr='' authen_type=ASCII service=LOGIN priv=0
01:23:36: AAA/AUTHEN/START (1504053479): port='a}' list='default' 
action=LOGIN service=LOGIN
01:23:36: AAA/AUTHEN/START (1504053479): found list default
01:23:36: AAA/AUTHEN/START (1504053479): Method=LOCAL
01:23:36: AAA/AUTHEN (1504053479): status = GETUSER
01:23:36: AAA/AUTHEN/CONT (1504053479): continue_login (user='(undef)')
01:23:36: AAA/AUTHEN (1504053479): status = GETUSER
01:23:36: AAA/AUTHEN/CONT (1504053479): Method=LOCAL
01:23:36: AAA/AUTHEN (1504053479): User not found, emulating local-override
01:23:36: AAA/AUTHEN (1504053479): status = ERROR
01:23:36: AAA/AUTHEN/START (58099628): port='a}' list='' action=LOGIN service=LOGIN
01:23:36: AAA/AUTHEN/START (58099628): Restart
01:23:36: AAA/AUTHEN/START (58099628): Method=RTP (radius)
01:23:36: AAA/AUTHEN (58099628): status = GETPASS
01:23:36: AAA/AUTHEN/CONT (58099628): continue_login (user='proxyonly')
01:23:36: AAA/AUTHEN (58099628): status = GETPASS
01:23:36: AAA/AUTHEN (58099628): Method=RTP (radius)
01:23:36: RADIUS: ustruct sharecount=1
01:23:36: RADIUS: Initial Transmit a} id 2 171.68.118.84:1645, 
Access-Request, len 67
01:23:36:         Attribute 4 6 0A1F0196
01:23:36:         Attribute 61 6 00000000
01:23:36:         Attribute 1 11 70726F78
01:23:36:         Attribute 2 18 7CC79416
01:23:36:         Attribute 6 6 00000005
01:23:36: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:36: RADIUS: Received from id 2 171.68.118.84:1645, Access-Accept, Len 207
01:23:36:         Attribute 6 6 00000005
01:23:36:         Attribute 26 30 0000000901186175
01:23:36:         Attribute 26 49 00000009012B6175
01:23:36:         Attribute 26 48 00000009012A6175
01:23:36:         Attribute 26 48 00000009012A6175
01:23:36:         Attribute 8 6 FFFFFFFF
01:23:36: RADIUS: saved authorization data for user 61C52DD8 at 619E0D8C
01:23:36: AAA/AUTHEN (58099628): status = PASS
01:23:36: a} AAA/AUTHOR/HTTP (147390869): Port='a}' list='default' 
service=AUTH-PROXY
01:23:36: AAA/AUTHOR/HTTP: a} (147390869) user='proxyonly'
01:23:36: a} AAA/AUTHOR/HTTP (147390869): send AV service=auth-proxy
01:23:36: a} AAA/AUTHOR/HTTP (147390869): send AV cmd*
01:23:36: a} AAA/AUTHOR/HTTP (147390869): found list "default"
01:23:36: a} AAA/AUTHOR/HTTP (147390869): Method=RTP (radius)
01:23:36: RADIUS: cisco AVPair "auth-proxy:priv-lvl=15"
01:23:36: RADIUS: cisco AVPair "auth-proxy:proxyacl#1=permit icmp any any"
01:23:36: RADIUS: cisco AVPair "auth-proxy:proxyacl#2=permit tcp any any"
01:23:36: RADIUS: cisco AVPair "auth-proxy:proxyacl#3=permit udp any any"
01:23:36: AAA/AUTHOR (147390869): Post authorization status = PASS_ADD
01:23:36: AUTH-PROXY FUNC: auth_proxy_copy_attrs
01:23:36: AUTH-PROXY FUNC: auth_proxy_find_cache
01:23:36: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: AUTH-PROXY FUNC: auth_proxy_find_cache
01:23:36: AUTH-PROXY : auth_proxy_find_cache
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: AUTH-PROXY FUNC: auth_proxy_http_accept
01:23:36: AUTH-PROXY FUNC: auth_proxy_proc_profile
01:23:36: AUTH-PROXY FUNC: auth_proxy_add_acl_item
01:23:36: AUTH-PROXY FUNC: auth_proxy_add_acl_item
01:23:36: AUTH-PROXY FUNC: auth_proxy_add_acl_item
01:23:36: AUTH-PROXY FUNC: auth_proxy_add_acl_item
01:23:36: AUTH-PROXY FUNC: auth_proxy_add_acl_item
01:23:36: AUTH-PROXY FUNC: auth_proxy_add_acl_item
01:23:36: AAA/MEMORY: free_user (0x61C52DD8) user='proxyonly' 
ruser='' port='a}' rem_addr='' authen_type=ASCII service=LOGIN priv=0
01:23:36: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:36:  ack 1726144118 seq 415291(0)
01:23:36: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4944
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: clientport 4944 state 2
01:23:36: AUTH-PROXY FUNC: auth_proxy_process_path
01:23:36:  F ack 1726144118 seq 415291(0)
01:23:36: DST_addr 185273100 src_addr 169804079 DST_port 80 src_port 4944
01:23:36: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:36: clientport 4944 state 2
01:23:39: AUTH-PROXY FUNC: auth_proxy_timers
01:23:39: AUTH-PROXY FUNC: auth_proxy_handle_finwait_timeout
01:23:41: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:41: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:41: AUTH-PROXY FUNC: auth_proxy_set_hit
01:23:41: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:41: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:41: AUTH-PROXY FUNC: auth_proxy_set_hit
01:23:41: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:41: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:41: AUTH-PROXY FUNC: auth_proxy_set_hit
01:23:41: AUTH-PROXY FUNC: auth_proxy_fast_path
01:23:41: AUTH-PROXY auth_proxy_find_conn_info : 
         find srcaddr - 10.31.1.47, dstaddr - 11.11.11.12
                 ip-srcaddr 10.31.1.47
                 pak-srcaddr 0.0.0.0
 
01:23:41: AUTH-PROXY FUNC: auth_proxy_set_hit

Problèmes potentiels

Serveur RADIUS inaccessible

Le débogage indique :

01:30:39: RADIUS: Initial Transmit  id 6 171.68.118.115:1645, 
Access-Request, Len 67
01:30:39:         Attribute 4 6 0A1F0196
01:30:39:         Attribute 61 6 00000000
01:30:39:         Attribute 1 11 70726F78
01:30:39:         Attribute 2 18 E552A3E5
01:30:39:         Attribute 6 6 00000005
01:30:44: RADIUS: Retransmit id 6
01:30:49: RADIUS: Retransmit id 6
01:30:59: RADIUS: Marking server 171.68.118.115 dead
01:30:59: RADIUS: Tried all servers.
01:30:59: RADIUS: No valid server found. Trying any viable server
01:30:59: RADIUS: Tried all servers.
01:30:59: RADIUS: No response for id 6
01:30:59: RADIUS: No response from server
01:30:59: AAA/AUTHEN (1597176845): status = ERROR

L'utilisateur peut éventuellement voir « 500 Erreur interne du serveur. »

Le serveur TACACS est inaccessible

Le débogage indique :

02:13:41: AAA/AUTHEN/START (3727404152): Method=RTP (tacacs+)
02:13:41: TAC+: send AUTHEN/START packet ver=192 id=3727404152
02:13:41: TAC+: Using default tacacs server-group "RTP" list.
02:13:41: TAC+: Opening TCP/IP to 171.68.118.115/49 timeout=5
02:13:41: TAC+: TCP/IP open to 171.68.118.115/49 failed 
-- Connection refused by remote host
02:13:41: AAA/AUTHEN (3727404152): status = ERROR

L'utilisateur peut éventuellement voir « 500 Erreur interne du serveur. »

L'utilisateur RADIUS entre un nom d'utilisateur ou un mot de passe incorrect

Le débogage indique :

01:37:42: RADIUS: Received from id 10 171.68.118.115:1645, Access-Reject, Len 20
01:37:42: AAA/AUTHEN (3558550985): status = FAIL
01:37:42: AAA/MEMORY: free_user (0x61C549F0) user='junk' ruser='' 
          port='' rem_addr='' authen_type=ASCII service=LOGIN priv=0

L'utilisateur voit « Échec de l'authentification ! »

L'utilisateur TACACS entre un nom d'utilisateur ou un mot de passe incorrect

Le débogage indique :

02:15:03: AAA/AUTHEN/START (1400571814): Method=RTP (tacacs+)
02:15:03: TAC+: send AUTHEN/START packet ver=192 id=1400571814
02:15:03: TAC+: Using default tacacs server-group "RTP" list.
02:15:03: TAC+: Opening TCP/IP to 171.68.118.115/49 timeout=5
02:15:03: TAC+: Opened TCP/IP handle 0x61CAFEA8 to 171.68.118.115/49
02:15:03: TAC+: 171.68.118.115 (1400571814) AUTHEN/START/LOGIN/ASCII queued
02:15:04: TAC+: (1400571814) AUTHEN/START/LOGIN/ASCII processed
02:15:04: TAC+: ver=192 id=1400571814 received AUTHEN status = GETPASS
02:15:04: AAA/AUTHEN (1400571814): status = GETPASS
02:15:04: AAA/AUTHEN/CONT (1400571814): continue_login (user='junkuser')
02:15:04: AAA/AUTHEN (1400571814): status = GETPASS
02:15:04: AAA/AUTHEN (1400571814): Method=RTP (tacacs+)
02:15:04: TAC+: send AUTHEN/CONT packet id=1400571814
02:15:04: TAC+: 171.68.118.115 (1400571814) AUTHEN/CONT queued
02:15:04: TAC+: (1400571814) AUTHEN/CONT processed
02:15:04: TAC+: ver=192 id=1400571814 received AUTHEN status = FAIL
02:15:04: AAA/AUTHEN (1400571814): status = FAIL

L'utilisateur voit « Échec de l'authentification ! »

L'utilisateur TACACS entre un nom d'utilisateur et un mot de passe corrects, mais ne dispose pas d'autorisation

Le débogage indique :

02:17:01: TAC+: ver=192 id=945629484 received AUTHEN status = PASS
02:17:02: TAC+: (1368282367): received author response status = FAIL
02:17:02: TAC+: Closing TCP/IP 0x61CAFFC8 connection to 171.68.118.115/49
02:17:02: AAA/AUTHOR (1368282367): Post authorization status = FAIL

L'utilisateur voit « Échec de l'authentification ! »

L'utilisateur RADIUS entre un nom d'utilisateur et un mot de passe corrects, mais la liste de contrôle d'accès renvoie au format non valide

Le débogage indique que la ou les listes de contrôle d'accès sont désactivées mais qu'elles ne sont pas appliquées et que l'utilisateur ne peut pas passer par le pare-feu.

L'utilisateur voit « Authentification réussie ! »

L'utilisateur TACACS entre un nom d'utilisateur et un mot de passe corrects, mais la liste de contrôle d'accès renvoie au format non valide

Le débogage n'est pas différent de l'authentification réussie, mais les listes de contrôle d'accès ne sont pas appliquées et l'utilisateur ne peut pas passer par le pare-feu.

L'utilisateur voit « Authentification réussie ! »

L'utilisateur RADIUS entre un nom d'utilisateur et un mot de passe corrects, mais Priv-lvl 15 non retourné

Le débogage indique :

02:00:54: RADIUS: saved authorization data for user 61CA670C at 61C5585C
02:00:54: AAA/AUTHEN (706562375): status = PASS
02:00:54:  AAA/AUTHOR/HTTP (4224202114): Port='' list='default' service=AUTH-PROXY
02:00:54: AAA/AUTHOR/HTTP:  (4224202114) user='baduser'
02:00:54:  AAA/AUTHOR/HTTP (4224202114): send AV service=auth-proxy
02:00:54:  AAA/AUTHOR/HTTP (4224202114): send AV cmd*
02:00:54:  AAA/AUTHOR/HTTP (4224202114): found list "default"
02:00:54:  AAA/AUTHOR/HTTP (4224202114): Method=RTP (radius)
02:00:54: RADIUS: cisco AVPair "auth-proxy:priv-lvl=1"

L'utilisateur voit « Authentication Failed » même si le débogage du routeur n'indique rien d'inhabituel sauf le niveau de privilège incorrect. Les listes de contrôle d’accès ne sont pas appliquées.

L'utilisateur TACACS entre le nom d'utilisateur et le mot de passe corrects, mais Priv-lvl 15 non retourné

Le débogage n'a pas d'aspect différent de celui de l'authentification réussie.

L'utilisateur verra « Échec de l'authentification ! »

Informations connexes

Historique de révision

Révision	Date de publication	Commentaires
1.0	14-Jan-2008	Première publication

Dépannage du proxy d'authentification

Options de téléchargement

Langage exempt de préjugés

À propos de cette traduction

Contenu

Historique de révision

Ce document vous est-il utile?

Contacter Cisco

Ce document s’applique à ces produits