Appendix F. Security Messages for Authentication
ROS® v3.11User Guide
135
RMC30
Appendix F. Security Messages for
Authentication
The following describes the authentication-related security messages that can be generated
by ROS®.
F.1. Security Messages for Login Authentication
ROS® provides various logging options related to login authentication. A user can log into a
ROS® device in three different ways: Console, SSH or Telnet. ROS® can log messages in the
syslog, send a trap to notify an SNMP manager, and/or raise an alarm when a successful and
unsuccessful login event occurs. In addition, when a weak password is configured on a unit
or when the primary authentication server for or RADIUS is not reachable, ROS®
will raise alarms, send SNMP traps and log messages in the syslog.
The following is a list of log and alarm messages related to user authentication:
• Weak Password Configured
• Login and Logout Information
• Excessive Failed Login Attempts
• RADIUS Server Unreachable
• TACACS Server Unreachable
• TACACS Response Invalid
• SNMP Authentication Failure
All alarms and log messages related to login authentication are configurable. See
Section 4.1.4, “Configuring Alarms”
Weak Password Configured
ROS® generates this alarm and logs a message in the syslog when a weak password is
configured in the Passwords table.
Message Name
Alarm
SNMP Trap
Syslog
Weak
Password
Configured
Yes
Yes
Yes
Table F.1. Configurable Options
Login and Logout Information
ROS® generates this alarm and logs a message in the syslog when a successful and
unsuccessful login attempt occurs. A message is also logged in the syslog when a user with
certain a privilege level is logged out from the device.
Login attempts are logged regardless of how the user accesses the device (i.e. SSH, Web,
Console, Telnet or RSH). However, when a user logs out, a message is only logged when the
user is accessing the device through SSH, Telnet or Console.
Message Name
Alarm
SNMP Trap
Syslog
Successful Login
Yes
Yes
Yes
