No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade
Knowledge Base

Users were cut after input the correct password by ssh

Publication Date:  2019-07-16  |   Views:  3  |   Downloads:  0  |   Author:  m00192929  |   Document ID:  EKB1000036985

Contents

Issue Description

When I  remote access AR1200 by ssh or web interface ,after I input a correct password ,the access user will be cut off ,I have to connect with  console cable.

Alarm Information

When I  remote access AR1200 by ssh or web interface ,after I input a correct password ,the access user will be cut off ,I have to connect with  console cable.

Handling Process

there are two ways to resolve this ,one is to delete "accounting-mode hwtacacs". Another way is to add command "accounting interim-fail".

Root Cause

by checking the  configuration:
local-user admin password cipher admin
local-user admin service-type web terminal
local-user admin level 3
authentication-scheme default
authorization-scheme default
accounting-scheme default
  accounting-mode hwtacacs

As there is no accounting mode configured in this device .if you add this command,after authenticate successfully,  then  turn to accounting ,and the finally result surely will be fail, causing this user cut by system.

Suggestions

please make sure your AAA  scheme is correct before login.