[tac_plus] source IP is not in tacacs log for failed logins

heasley heas at shrubbery.net
Tue Jul 22 20:06:47 UTC 2014


Tue, Jul 22, 2014 at 03:55:40PM -0400, Asif Iqbal:
> Is there a way to get the source IP of a failed login in tacacs log?
> 
> I see few different debug levels, and not sure which one, if at all, would
> carry the source
> IP in the log for failed logins.

the IP of the tacacs client is in the logs.  if you mean of the devices'
client, it tends to only send that if its a PPP/SLIP client.  you can
look for it in the AVPs sent by the tacacs client.


More information about the tac_plus mailing list