Fallbacks
This scenario shows how to set up a fallback mechanism for RADIUS/TACACS+ through Telnet/SSH.
Test Authentication Fallback
Description
This scenario checks all the different combinations
of RADIUS/TACACS+ authentication with/without
fallback configuration through SSH and Telnet.
The user baduser is configured in the local
database, but it is not authorized in the remote
server. Therefore, if the server is reachable or
if local fallback is not specified, login should fail.
Scenario
Example 1
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa list LIST method 2 local set system aaa server tacacs SRV address 10.215.168.1 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/gzWp8zLcOCmQ+LU23ffcUyEU8syEj2Yo= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.176 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.176/0.176/0.176/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-000000000000759b-000640d23507da7f.journal (172.0K). Vacuuming done, freed 172.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /run/log/journal. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 2
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa server tacacs SRV address 10.215.168.1 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/gzWp8zLcOCmQ+LU23ffcUyEU8syEj2Yo= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.150 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.150/0.150/0.150/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-0000000000007626-000640d2369eaf7f.journal (108.0K). Vacuuming done, freed 108.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /run/log/journal. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 3
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP local-vrf test set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa list LIST method 2 local set system aaa server tacacs SRV address 10.215.168.1 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/gzWp8zLcOCmQ+LU23ffcUyEU8syEj2Yo= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.174 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.174/0.174/0.174/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-0000000000007658-000640d23821b90b.journal (108.0K). Vacuuming done, freed 108.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 4
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP local-vrf test set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa server tacacs SRV address 10.215.168.1 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/gzWp8zLcOCmQ+LU23ffcUyEU8syEj2Yo= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.132 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.132/0.132/0.132/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /var/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-000000000000768d-000640d2399e0d18.journal (108.0K). Vacuuming done, freed 108.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /run/log/journal.
Example 5
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa list LIST method 2 local set system aaa server radius SRV address 10.215.168.1 set system aaa server radius SRV encrypted-key U2FsdGVkX1+N9GfZ6hKEw5tlo6ivqdIG2Fk93YQVZnJXT5rsq6vCOO8g4K87dSUFy79BiJ2CikqGAx0qK+hDdg== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.200 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.200/0.200/0.200/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /var/log/journal. Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-00000000000076c0-000640d23b22ff2b.journal (160.0K). Vacuuming done, freed 160.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac.
Example 6
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa server radius SRV address 10.215.168.1 set system aaa server radius SRV encrypted-key U2FsdGVkX1+N9GfZ6hKEw5tlo6ivqdIG2Fk93YQVZnJXT5rsq6vCOO8g4K87dSUFy79BiJ2CikqGAx0qK+hDdg== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.128 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.128/0.128/0.128/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-000000000000773a-000640d23cbc33a9.journal (104.0K). Vacuuming done, freed 104.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 7
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP local-vrf test set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa list LIST method 2 local set system aaa server radius SRV address 10.215.168.1 set system aaa server radius SRV encrypted-key U2FsdGVkX1+N9GfZ6hKEw5tlo6ivqdIG2Fk93YQVZnJXT5rsq6vCOO8g4K87dSUFy79BiJ2CikqGAx0qK+hDdg== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.152 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.152/0.152/0.152/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /var/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-0000000000007763-000640d23e52fa26.journal (104.0K). Vacuuming done, freed 104.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /run/log/journal.
Example 8
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP local-vrf test set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa server radius SRV address 10.215.168.1 set system aaa server radius SRV encrypted-key U2FsdGVkX1+N9GfZ6hKEw5tlo6ivqdIG2Fk93YQVZnJXT5rsq6vCOO8g4K87dSUFy79BiJ2CikqGAx0qK+hDdg== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.139 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.139/0.139/0.139/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Vacuuming done, freed 0B of archived journals from /var/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-0000000000007790-000640d23fe6ca08.journal (104.0K). Vacuuming done, freed 104.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac.
Example 9
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa list LIST method 2 local set system aaa server tacacs SRV address 1.2.3.4 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/0z8/GdbfIjslklVJtEsYvJ33hCFrg2Ys= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.178 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.178/0.178/0.178/0.000 ms
Note
In this case, SSH and Telnet connection will be successful, because the tacacs server, i.e., method 1, is not reachable and; therefore, the next method will be attempted (local method) and it will allow the authentication.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. baduser@osdx$
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. Last login: Fri Oct 10 18:40:47 UTC 2025 from 127.0.0.1 on pts/1 baduser@osdx$
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-00000000000077bb-000640d24175c771.journal (172.0K). Vacuuming done, freed 172.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal. Vacuuming done, freed 0B of archived journals from /run/log/journal.
Example 10
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa server tacacs SRV address 1.2.3.4 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/0z8/GdbfIjslklVJtEsYvJ33hCFrg2Ys= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.146 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.146/0.146/0.146/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /var/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-0000000000007848-000640d2419a8c24.journal (108.0K). Vacuuming done, freed 108.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /run/log/journal.
Example 11
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP local-vrf test set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa list LIST method 2 local set system aaa server tacacs SRV address 1.2.3.4 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/0z8/GdbfIjslklVJtEsYvJ33hCFrg2Ys= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.181 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.181/0.181/0.181/0.000 ms
Note
In this case, SSH and Telnet connection will be successful, because the tacacs server, i.e., method 1, is not reachable and; therefore, the next method will be attempted (local method) and it will allow the authentication.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. Last login: Fri Oct 10 18:40:48 2025 from ::ffff:127.0.0.1 baduser@osdx$
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. Last login: Fri Oct 10 18:41:15 UTC 2025 from 127.0.0.1 on pts/1 baduser@osdx$
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-000000000000787b-000640d243182152.journal (116.0K). Vacuuming done, freed 116.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 12
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group tacacs GROUP local-vrf test set system aaa group tacacs GROUP server SRV set system aaa list LIST method 1 group tacacs GROUP set system aaa server tacacs SRV address 1.2.3.4 set system aaa server tacacs SRV encrypted-key U2FsdGVkX1/0z8/GdbfIjslklVJtEsYvJ33hCFrg2Ys= set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.115 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.115/0.115/0.115/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-00000000000078be-000640d2433fc068.journal (108.0K). Vacuuming done, freed 108.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal. Vacuuming done, freed 0B of archived journals from /run/log/journal.
Example 13
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa list LIST method 2 local set system aaa server radius SRV address 1.2.3.4 set system aaa server radius SRV encrypted-key U2FsdGVkX1/zQTB98t3smXjjC2WdTNVIdEE8dNmVQUZNzlVXWtos/Nki+Rar8KWyw11Xti79KmTIkGXb6lONKA== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.162 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.162/0.162/0.162/0.000 ms
Note
In this case, SSH and Telnet connection will be successful, because the radius server, i.e., method 1, is not reachable and; therefore, the next method will be attempted (local method) and it will allow the authentication.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. Last login: Fri Oct 10 18:41:15 2025 from ::ffff:127.0.0.1 baduser@osdx$
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. Last login: Fri Oct 10 18:41:43 UTC 2025 from 127.0.0.1 on pts/1 baduser@osdx$
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-00000000000078f3-000640d244c83350.journal (168.0K). Vacuuming done, freed 168.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 14
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa server radius SRV address 1.2.3.4 set system aaa server radius SRV encrypted-key U2FsdGVkX1/zQTB98t3smXjjC2WdTNVIdEE8dNmVQUZNzlVXWtos/Nki+Rar8KWyw11Xti79KmTIkGXb6lONKA== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.130 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.130/0.130/0.130/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-0000000000007978-000640d244f1076e.journal (104.0K). Vacuuming done, freed 104.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 15
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP local-vrf test set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa list LIST method 2 local set system aaa server radius SRV address 1.2.3.4 set system aaa server radius SRV encrypted-key U2FsdGVkX1/zQTB98t3smXjjC2WdTNVIdEE8dNmVQUZNzlVXWtos/Nki+Rar8KWyw11Xti79KmTIkGXb6lONKA== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.186 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.186/0.186/0.186/0.000 ms
Note
In this case, SSH and Telnet connection will be successful, because the radius server, i.e., method 1, is not reachable and; therefore, the next method will be attempted (local method) and it will allow the authentication.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. Last login: Fri Oct 10 18:41:44 2025 from ::ffff:127.0.0.1 baduser@osdx$
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Welcome to Teldat OSDx v4.2.7.0 This system includes free software. Contact Teldat for licenses information and source code. Last login: Fri Oct 10 18:42:11 UTC 2025 from 127.0.0.1 on pts/1 baduser@osdx$
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-00000000000079a5-000640d2466ffa94.journal (112.0K). Vacuuming done, freed 112.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal.
Example 16
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth0 vrf test set service ssh aaa authentication LIST set service telnet set system aaa group radius GROUP local-vrf test set system aaa group radius GROUP server SRV set system aaa list LIST method 1 group radius GROUP set system aaa server radius SRV address 1.2.3.4 set system aaa server radius SRV encrypted-key U2FsdGVkX1/zQTB98t3smXjjC2WdTNVIdEE8dNmVQUZNzlVXWtos/Nki+Rar8KWyw11Xti79KmTIkGXb6lONKA== set system login aaa authentication LIST set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system login user baduser authentication encrypted-password '$6$qGLj7K3ZB5gfhNLz$WgSlQwMwnv/bxzW8b/Yg6/OxE0Qf6fwXo0fArl5Uh/4mVrJlUcnlzGkB4bFUdsQuW0xy4aYEIFhPMi3Mkt0ZB1' set system vrf test
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 vrf test count 1 size 56 timeout 1Show output
ping: Warning: source address might be selected on device other than: test PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 test: 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.186 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.186/0.186/0.186/0.000 ms
Note
In this case, SSH and Telnet connection will fail.
Step 3: Init an SSH connection from DUT0 to IP address 127.0.0.1 with the user baduser:
admin@DUT0$ ssh baduser@127.0.0.1 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/nullShow output
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts. baduser@127.0.0.1's password:
Step 4: Init a Telnet connection from DUT0 to IP address 127.0.0.1 :
admin@DUT0$ telnet 127.0.0.1Show output
Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Linux 6.1.140 (osdx) (pts/1) osdx login: Password: Login incorrect
Step 5: Run command system journal clear at DUT0 and expect this output:
Show output
Vacuuming done, freed 0B of archived journals from /run/log/journal. Deleted archived journal /run/log/journal/d6792964fe7547c9a60a3d774aa97dac/system@697c7cb6f55d4721ad7414ecb349e56d-00000000000079dd-000640d2469b2c9f.journal (104.0K). Vacuuming done, freed 104.0K of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Vacuuming done, freed 0B of archived journals from /var/log/journal.