Why does the TACACS server receive accounting packets when commands are entered on an AR


The recording scheme is configured on the AR. To delete the recording scheme, run the undo cmd recording-scheme command in the AAA view.

Other related questions:
What is the meaning of PACKET_LENGTH_WRON in the NTP log of the AR router
NTP/4/PACKET_LENGTH_WRON G(l)[500]:The received NTP packet is longer than or shorter than a valid packet. This log is generated when the AR receives NTP packets in which the packet length is not in the range of 32 to 68. If this log does not need to be displayed, run the info-center filter-id bymodule-alias CFM CFM_LOG command in the system view.

Why does HWTACACS authentication fail when the HWTACACS configuration is correct
The HWTACACS server template configuration of the AR is correct. In AAA mode, the HWTACACS authentication configuration and configuration of the remote TACACS server are correct. The possible causes for HWTACACS authentication failures are as follows: - The client's IP address is not configured on the TACACS server, so the TACACS server does not send authentication packets. - Different shared keys are configured on the AR and TACACS server.

Why are accounting packets received when commands are run on devices
This occurs so that devices can record history commands. To disable this function, run the undo cmd recording-scheme command in the AAA view.

Does the AR router support the L2TP VPN accounting function
L2TP of the AR router does not support the accounting function. Accounting-stop packets are not generated after users are disconnected from the network. As a result, the RADIUS accounting function of L2TP users is not supported either. V200R007 and later versions support the RADIUS accounting function.

Why an interface does not enter the linkdown state when its receiving power reaches the lower threshold
An enhanced optical module has two thresholds for optical power: a warning threshold and an alarm threshold. When the receiving power of an interface falls below the lower warning threshold, packets may be lost on the interface, but the interface does not enter the linkdown state. When the receiving power of an interface reaches the lower alarm threshold, severe packet loss may occur, or even the interface enters the linkdown state. A high receiving power may corrupt an optical module.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top