18-11
Troubleshooting
Unusual Network Activity
Troubleshooting
■The time quota for the account has been exhausted.
■The time credit for the account has expired.
■The access attempt is outside of the timeframe allowed for the
account.
■The allowed number of concurrent logins for the account has been
exceeded
For more help, refer to the documentation provided with your TACACS+
server application.
Unknown Users Allowed to Login to the Switch. Your TACACS+ appli-
cation may be configured to allow access to unknown users by assign ing them
the privileges included in a default user profile. Refer to the docum entation
provided with your TACACS+ server application.
System Allows Fewer Login Attempts than Specified in the Switch
Configuration. Your TACACS+ server application may be configured to
allow fewer login attempts than you have configured in the switch with the
aaa authentication num-attempts command.
TimeP, SNTP, or Gateway Problems
The Switch Cannot Find the Time Server or the Configured Gateway .
TimeP, SNTP, and Gateway access are through the primary VLAN, which in
the default configuration is the DEFAULT_VLAN. If the primary VLAN has
been moved to another VLAN, it may be disabled or does not have ports
assigned to it.
VLAN-Related Problems
Monitor Port. When using the monitor port in a multiple VLAN environ-
ment, the switch handles broadcast, multicast, and unicast traffic ou tput from
the monitor port as follows:
■If the monitor port is configured for tagged VLAN operation o n the same
VLAN as the traffic from monitored ports, the traffic output from the
monitor port carries the same VLAN tag.
■If the monitor port is configured for untagged VLAN operat ion on the same
VLAN as the traffic from the monitored ports, the traffic output from the
monitor port is untagged.