AAA故障与调试
在路由器的AAA配置中,是否认证,认证、授权及记账情况如何,在配置阶段少不了调试,在出现故障时,借助调试信息能很好地定位故障点。
1.Debug AAA Authentication命令
使用Debug AAA Authentication命令来调试一个EXEC登录过程,采用的Rongxin的认证方法列表,使用TACACS+认证协议,系统通过发送GETUSER和GETPASS来提示输入用户名和密码,最优通过认证(PASS)的过程。
Router# debug aaa authentication
AAA Authentication debugging is on
Router#
*Mar 1 01:34:40.819: AAA/BIND(00000015): Bind i/f
*Mar 1 01:34:40.827: AAA/AUTHEN/LOGIN (00000015): Pick method list 'rongxin'
*Mar 1 01:34:52.903: AAA: parse name=tty130 idb type=-1 tty=-1
*Mar 1 01:34:52.903: AAA: name=tty130 flags=0x11 type=5 shelf=0 slot=0 adapter=0 port=130 channel=0
*Mar 1 01:34:52.907: AAA/MEMORY: create_user (0x64DE58AC) user='user1' ruser='NULL' ds0=0 port='tty130'
rem_addr='192.168.1.102' authen_type=ASCII service=ENABLE priv=15 initial_task_id='0', vrf= (id=0)
*Mar 1 01:34:52.911: AAA/AUTHEN/START (1579679647): port='tty130' list='rongxin' action=LOGIN service=ENABLE
*Mar 1 01:34:52.915: AAA/AUTHEN/START (1579679647): _disibledevent=tacacs+ (TACACS+)
*Mar 1 01:36:44.859: AAA/ACCT/EXEC(00000017): STOP protocol reply PASS
*Mar 1 01:36:44.863: AAA/ACCT(00000017): Send STOP accounting notification to EM successfully
*Mar 1 01:36:44.867: AAA/ACCT/EXEC(00000017): Cleaning up from Callback osr 0
*Mar 1 01:36:44.867: AAA/ACCT(00000017): del node, session 20
*Mar 1 01:36:44.871: AAA/ACCT/EXEC(00000017): free_rec, count 0
*Mar 1 01:36:44.871: AAA/ACCT/EXEC(00000017) reccnt 0, csr TRUE, osr 0
*Mar 1 01:36:44.875: AAA/ACCT/EXEC(00000017): Last rec in db, intf not enqueued