Attack on Authentication Server

From: Vishal B Patel (vishalp@fasttelco.net)
Date: Sat Nov 13 2004 - 19:12:21 GMT-3

• Next message: Mark Lewis: "RE: MPLS-vrf limitation"
• Previous message: Yasser Aly: "RE: MPLS-vrf limitation"
• Next in thread: mmj: "RE: Attack on Authentication Server"
• Maybe reply: mmj: "RE: Attack on Authentication Server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello ,
  
 Iam facing a problem with my ACS , I have been using Cisco ACS for users
authentication of the various Routers, Access Servers and DSLAMs

From last fews days I notice that ACS is being flooded by requests for
authentication from the access servers and DSLAMs , when I check the logs of
failed attempts in ACS , it says the user is trying to login from a aync
connection and for the matter of fact the DSLAMs are not having any async
connections.

I tried to run Debug Modems and Debug Tacacs events on the DSLAMs ,I can
just see the that Modem is trying to come up on a TTY line and then TACACS
authentication is trying to happen.

If would be of great help if anyone help me to solve this problem.

Thanks

Vishal

• Next message: Mark Lewis: "RE: MPLS-vrf limitation"
• Previous message: Yasser Aly: "RE: MPLS-vrf limitation"
• Next in thread: mmj: "RE: Attack on Authentication Server"
• Maybe reply: mmj: "RE: Attack on Authentication Server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Dec 02 2004 - 06:57:43 GMT-3