2-39
Controlling Management Access to the ProCurve Secure Router
Troubleshooting AAA
Table 2-7. Global Settings for TACACS+ Servers
Troubleshooting AAA
The ProCurve Secure Router provides several commands to help you
troubleshoot the AAA subsystem.
debug aaa Command
You can view detailed messages about the AAA subsystem in real time. From
the enable mode context, enter:
Syntax: debug aaa
The Secure Router OS will then display AAA events such as connection
notices, login attempts, and session tracking. Figure 2-4 shows the debug aaa
messages when a user attempts to establish a Telnet session but does not enter
a valid username and password. The AAA subsystem has been enabled on the
router, but no named list has been defined for Telnet access, so the ProCurve
Secure Router uses the default named list.
Option Meaning Default Value
tacacs-server key <key> Specifies the shared key to use with TACACS+ servers. Any
keys you configure for a particular TACACS+ server
supersede the global key.
none
packet maxsize <size> Defines the packet size to send to the TACACS+ server. You
can specify a number between 10240 and 65535.
10240
tacacs-server timeout
<seconds>
Specifies how long to wait for the TACACS+ server to
respond to a request. You can specify a number between 1
and 1000.
5 seconds
To Next Page
Loading...
Need help?
General
