Thanks John. But what is single-connection tacacs on the device?<br><br><div class="gmail_quote">On Fri, Apr 2, 2010 at 3:12 PM, john heasley <span dir="ltr"><<a href="mailto:heas@shrubbery.net">heas@shrubbery.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Fri, Apr 02, 2010 at 11:21:52AM -0500, Hailu Meng:<br>
<div class="im">> Hi there,<br>
><br>
> I recently setup Ciscoworks to backup the cisco device configuration every<br>
> day. Right now I configured 126 devices in CiscoWorks to be back up. But<br>
> after Ciscoworks finished the scheduled backup job, I found my tac_plus<br>
> process has been stopped automatically. I checked the tac_plus log and found<br>
> the end of log file has one error:<br>
> Fri Apr 2 08:20:28 2010 [3417]: Error 10.x.x.x: Bad sequence number 3<br>
> should be even<br>
> what does it mean?<br>
<br>
</div>the sequence increments with each packet. its value depends upon where<br>
it is in the communication.<br>
<br>
either the device has become confused or you've enabled single-connection<br>
tacacs on the device, which neither IOS doesnt do properly and tac_plus<br>
doesnt support.<br>
<div><div></div><div class="h5"><br>
> Some devices got successfully telneted and get into the enable mode. But<br>
> some devices failed. In addition, I found the below error, it seems the<br>
> device is not reachable but the device didn't have any issue at that time.<br>
> Is there any possiblity that the unexpected delay cause this issue? Can I<br>
> adjust some kind of timeout parameter in tac_plus to be suitable for the<br>
> situation?<br>
><br>
> Fri Apr 2 08:20:24 2010 [3417]: Authen Start request<br>
> Fri Apr 2 08:20:24 2010 [3417]: choose_authen returns 1<br>
> Fri Apr 2 08:20:24 2010 [3417]: Writing AUTHEN/GETUSER size=55<br>
> Fri Apr 2 08:20:24 2010 [3417]: PACKET: key=tac_key<br>
> Fri Apr 2 08:20:24 2010 [3417]: version 192 (0xc0), type 1, seq no 2, flags<br>
> 0x1<br>
> Fri Apr 2 08:20:24 2010 [3417]: session_id 1720821293 (0x6691a62d), Data<br>
> length 43 (0x2b)<br>
> Fri Apr 2 08:20:24 2010 [3417]: End header<br>
> Fri Apr 2 08:20:24 2010 [3417]: type=AUTHEN status=4 (AUTHEN/GETUSER)<br>
> flags=0x0<br>
> Fri Apr 2 08:20:24 2010 [3417]: msg_len=37, data_len=0<br>
> Fri Apr 2 08:20:24 2010 [3417]: msg:<br>
> Fri Apr 2 08:20:24 2010 [3417]: 0xa User Access Verification 0xa<br>
> Fri Apr 2 08:20:24 2010 [3417]: data:<br>
> Fri Apr 2 08:20:24 2010 [3417]: End packet<br>
> Fri Apr 2 08:20:24 2010 [3417]: Waiting for packet<br>
> Fri Apr 2 08:20:24 2010 [3417]: 10.x.x.x: exception on fd 6<br>
> Fri Apr 2 08:20:24 2010 [3417]: Read -1 bytes from 10.x.x.x tty1, expecting<br>
> 12<br>
> Fri Apr 2 08:20:24 2010 [3417]: Error 10.x.x.x tty1: Null reply packet,<br>
> expecting CONTINUE<br>
> Fri Apr 2 08:20:24 2010 [3417]: 10.x.x.x: disconnect<br>
><br>
> Appreciated for your help! Thanks!<br>
><br>
> Lou<br>
</div></div>> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <a href="http://www.shrubbery.net/pipermail/tac_plus/attachments/20100402/8d493c05/attachment.html" target="_blank">http://www.shrubbery.net/pipermail/tac_plus/attachments/20100402/8d493c05/attachment.html</a><br>
> _______________________________________________<br>
> tac_plus mailing list<br>
> <a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a><br>
> <a href="http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus" target="_blank">http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus</a><br>
</blockquote></div><br>