Issue Description
When I remote access AR1200 by ssh or web interface ,after I input a correct password ,the access user will be cut off ,I have to connect with console cable.
Alarm Information
When I remote access AR1200 by ssh or web interface ,after I input a correct password ,the access user will be cut off ,I have to connect with console cable.
Handling Process
there are two ways to resolve this ,one is to delete "accounting-mode hwtacacs". Another way is to add command "accounting interim-fail".
Root Cause
by checking the configuration:
local-user admin password cipher admin
local-user admin service-type web terminal
local-user admin level 3
authentication-scheme default
authorization-scheme default
accounting-scheme default
accounting-mode hwtacacs
As there is no accounting mode configured in this device .if you add this command,after authenticate successfully, then turn to accounting ,and the finally result surely will be fail, causing this user cut by system.
Suggestions
please make sure your AAA scheme is correct before login.