Got it

SECU

Created: Sep 25, 2020 15:41:50Latest reply: Sep 27, 2020 03:51:50 408 13 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello all, what is SECU alarm? what does it work in network system managent? can explain me with diagram?


Have a good day!


Featured Answers
wissal
MVE Created Sep 26, 2020 17:57:23

Hello,

Description

The SECU_ALM alarm indicates that login attempts of unauthorized users fail.

Attribute

Alarm Severity

Alarm Type

Major

Equipment alarm

Parameters

None

Impact on the System

This alarm is reported transiently and does not affect services.

Possible Causes

Cause: Unauthorized users attempt to log in to the NE.

Procedure

  1. Query the NE logs and check the users who have attempted to log in.

Related Information

If a user fails in more than five consecutive login attempts (two login attempts within three minutes are considered consecutive), the SECU_ALM alarm will be reported at every failed attempt since the sixth one. In addition, the user account will be locked for 900 seconds. The locked user account cannot be used for logins.

Thanks

View more
  • x
  • convention:

Recommended answer

Malik3000
MVE Created Sep 26, 2020 17:31:26

Hi
Please open the link that Mr Liqiang attached .
It explains how to know the user and the terminal from which someone tries to login.

Here the content
................
SECU_ALM
Description
The SECU_ALM is an alarm indicating that an illegal user fails to log in to the NE.

Attribute
Alarm Severity Alarm Type
Major

Security alarm

Parameters
When you view an alarm on the network management system, select the alarm. In the Alarm Details field display the related parameters of the alarm. The alarm parameters are in the following format: Alarm Parameters (hex): parameter1 parameter2...parameterN. For details about each parameter, refer to the following table.

Name Meaning
Parameter 1

Indicates the login terminal.

Parameter 2, Parameter 3

Indicates the login errors.

Parameter 4, Parameter 5

Indicates the first two characters of the user name that is locked after the login verification fails.

Impact on the System
The SECU_ALM alarm has the following impact on the system:

The SECU_ALM alarm is ended soon after it is reported.

Possible Causes
The cause for the SECU_ALM alarm is as follows:

An illegal user tries to log in to the EN.

Procedure
Query the EN log to check the user name that is used for the login.
Related Information
After a user fails to log in to an NE for five consecutive times (if the interval between two logins is less than 3 minutes, the two logins are consecutive logins), the SECU_ALM alarm is reported upon each subsequent login failure and meanwhile the user is locked for 900 seconds. During the 900 seconds, the user cannot log in to the NE.
View more
  • x
  • convention:

All Answers
Hello User. we are reviewing your question and we will answer you shortly. Thanks.
View more
  • x
  • convention:

hi
secu_alm appears because someone entered a wrong password while trying to log in to the NE , for example some one wants to get to the NE by CLI (command line ) and entered wrong password so the staff near the management will see in the secu_alm .

View more
  • x
  • convention:

simchamnan
simchamnan Created Sep 26, 2020 17:09:17 (0) (0)
How to check someone user ID or IP? or it could be same domain user  

Hello,

If a user fails in more than five consecutive login attempts (two login attempts within three minutes are considered consecutive), the SECU_ALM alarm will be reported at every failed attempt since the sixth one. In addition, the user account will be locked for 900 seconds. The locked user account cannot be used for logins.


Thanks

View more
  • x
  • convention:

simchamnan
simchamnan Created Sep 26, 2020 17:10:06 (0) (0)
Accident login or something wrong with server? thanks  
wissal
wissal Reply simchamnan  Created Sep 26, 2020 17:58:37 (0) (0)
Unauthorized users attempt to log in to the NE. Thanks  

Hello,

The SECU_ALM is an alarm indicating that an illegal user fails to log in to the NE.


For more details, please click the following link:

https://support.huawei.com/hedex/hdx.do?docid=EDOC1100078669&lang=en


Thanks!


View more
  • x
  • convention:

simchamnan
simchamnan Created Sep 26, 2020 17:05:33 (0) (0)
Hi admin I cannot view the link  
liqiang185
liqiang185 Reply simchamnan  Created Sep 27, 2020 01:11:30 (0) (0)
You have no access to him. Click this link to upgrade your permissions:
https://forum.huawei.com/enterprise/en/how-do-we-upgrade-our-account/thread/652629-875  
Hi
Please open the link that Mr Liqiang attached .
It explains how to know the user and the terminal from which someone tries to login.

Here the content
................
SECU_ALM
Description
The SECU_ALM is an alarm indicating that an illegal user fails to log in to the NE.

Attribute
Alarm Severity Alarm Type
Major

Security alarm

Parameters
When you view an alarm on the network management system, select the alarm. In the Alarm Details field display the related parameters of the alarm. The alarm parameters are in the following format: Alarm Parameters (hex): parameter1 parameter2...parameterN. For details about each parameter, refer to the following table.

Name Meaning
Parameter 1

Indicates the login terminal.

Parameter 2, Parameter 3

Indicates the login errors.

Parameter 4, Parameter 5

Indicates the first two characters of the user name that is locked after the login verification fails.

Impact on the System
The SECU_ALM alarm has the following impact on the system:

The SECU_ALM alarm is ended soon after it is reported.

Possible Causes
The cause for the SECU_ALM alarm is as follows:

An illegal user tries to log in to the EN.

Procedure
Query the EN log to check the user name that is used for the login.
Related Information
After a user fails to log in to an NE for five consecutive times (if the interval between two logins is less than 3 minutes, the two logins are consecutive logins), the SECU_ALM alarm is reported upon each subsequent login failure and meanwhile the user is locked for 900 seconds. During the 900 seconds, the user cannot log in to the NE.
View more
  • x
  • convention:

Hello,

Description

The SECU_ALM alarm indicates that login attempts of unauthorized users fail.

Attribute

Alarm Severity

Alarm Type

Major

Equipment alarm

Parameters

None

Impact on the System

This alarm is reported transiently and does not affect services.

Possible Causes

Cause: Unauthorized users attempt to log in to the NE.

Procedure

  1. Query the NE logs and check the users who have attempted to log in.

Related Information

If a user fails in more than five consecutive login attempts (two login attempts within three minutes are considered consecutive), the SECU_ALM alarm will be reported at every failed attempt since the sixth one. In addition, the user account will be locked for 900 seconds. The locked user account cannot be used for logins.

Thanks

View more
  • x
  • convention:

Hell friend! with issue u can follow steps below hope its can help u:

Check whether another account is used to log in to the NE or whether the NE is managed by another NMS. Check whether the ECC communicates with other NEs with the same ID in another network. If yes, isolate the NE.

Thanks!
View more
  • x
  • convention:

simchamnan
simchamnan Created Sep 27, 2020 05:37:42 (0) (0)
Yes, it would be like that, I will follow ur instruction  

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.