ccna 200-301: lab assessments course

ccna 200-301: lab assessments course.3.4.3.1 Monitoring Authentication TrafficWhen AAA is enabled, it is necessary to monitor authentication traffic and troubleshoot the configuration frequently. The debugaaa authentication command provides a high-level view of logon activity and is therefore a valid AAA troubleshooting command. When a TACACS+ login attempt is successful, the command displays a PASS status message. If the status message returned is FAIL, it is necessary to verify the key and perform troubleshooting.76 Chapter 3 Authentication, Authorization, and Auditing3.4.3.2 Debugging TACACS+ and RADIUSTwo other commands that help troubleshoot server-based AAA are debug tacacs and debug radiuso Thesecommands provide more detailed AAA debugging information. To disable debugging output, use the no form of these commands. Similar to the debugaaa authentication command, debugtacacs also displays a status message of PASS or FAIL. You can use the debug tacacs command to view all TACACS+ messages. To restrict the results to show only messages from the TACACS+ helper(helper) process, use the debugtacacs events command in privileged EXEC mode. The debugtacacs events command displays the opening and closing of TCP connections to a TACACS+ server, the bytes read and written during the connection, and the TCP status of the connection. Use the debugtacacs events command with caution, as it generates a lot of output. To disable debugging output, use the no form of this command.3.5 Server-basedAAA authorization and auditing3