Viewing authentication failure log details, Managing access detail records – H3C Technologies H3C Intelligent Management Center User Manual

Page 489

Advertising
background image

471

For more information, see "

Adding an ordinary access user

."

4.

Click OK.

Viewing authentication failure log details

1.

Access the authentication failure log list page.

2.

Click the Details icon for an authentication failure log to view its details.
Detailed information includes:

{

Account Name—Access account name.

{

Login Name—Login username that the access device sent to UAM for the user.

{

Authentication Failure Cause—Error code and error cause description.

{

Failed At—Date and time when the user failed authentication, in the format YYYY-MM-DD
hh:mm:ss.

{

User IP Address—IPv4 address of the user.

{

User MAC Address—MAC address of the user.

{

User IPv6 Address—IPv6 address of the user.

{

Device IP—IPv4 or IPv6 address of the access device for the user. This address was recorded
when the access device was added to UAM and it might be different than the address being

used by the access device.

{

Device NAT IP Address—If the access device and UAM has a NAT device in between, this field
displays the target IPv4 address range used by the NAT for the access device. If not, this field
displays the actual IP address of the access device.

{

Port—Index of the port that the access device used to connect to the user. This index does not
include the chassis or slot number. For example, 3 displays regardless of whether the port

number is 1/0/3 or 2/0/3.

{

Device SN—Sequence number of the access device.

{

IMSI—IMSI number of the access device.

{

Service Name—Service assigned to the user.

{

VLAN ID/Inner VLAN ID—VLAN ID or inner VLAN ID assigned to the user.

{

Outer VLAN ID—Outer VLAN ID assigned to the user.

{

User SSID—SSID assigned to the user.

{

Computer Name—Name of the computer used by the user

{

Windows Domain—Windows domain name bound to the computer used by the user.

3.

Click Back to return to the authentication failure log list.

Managing access detail records

UAM maintains a history record for each successful access. The record includes the login name, login

time, connection duration, user IP address, IP address of access device, and logout cause. This

information helps administrators audit and analyze user behaviors.
To maintain database performance, UAM clears obsolete access detail records every day. The lifetime

of access detail records is determined by the service parameter Access Details Lifetime. For more

information about service parameters, see "

32 Configuring global system settings

."

Advertising