IronPort Systems 4108GL - Manual (Page 423)

18-11
Troubleshooting
Unusual Network Activity
Tro
ubl
e
shoo
tin
g
■ The time quota for the account has been exhausted.
■ The time credit for the account has expired.
■ The access attempt is outside of the timeframe allowed for the
account.
■ The allowed number of concurrent logins for the account has been
exceeded
For more help, refer to the documentation provided with your TACACS+
server application.
Unknown Users Allowed to Login to the Switch. Your TACACS+ appli-
cation may be configured to allow access to unknown users by assigning them
the privileges included in a default user profile. Refer to the documentation
provided with your TACACS+ server application.
System Allows Fewer Login Attempts than Specified in the Switch
Configuration.
Your TACACS+ server application may be configured to
allow fewer login attempts than you have configured in the switch with the
aaa authentication num-attempts command.
TimeP, SNTP, or Gateway Problems
The Switch Cannot Find the Time Server or the Configured Gateway .
TimeP, SNTP, and Gateway access are through the primary VLAN, which in
the default configuration is the DEFAULT_VLAN. If the primary VLAN has
been moved to another VLAN, it may be disabled or does not have ports
assigned to it.
VLAN-Related Problems
Monitor Port. When using the monitor port in a multiple VLAN environ-
ment, the switch handles broadcast, multicast, and unicast traffic output from
the monitor port as follows:
■ If the monitor port is configured for tagged VLAN operation on the same
VLAN as the traffic from monitored ports, the traffic output from the
monitor port carries the same VLAN tag.
■ If the monitor port is configured for untagged VLAN operation on the same
VLAN as the traffic from the monitored ports, the traffic output from the
monitor port is untagged.