Technical data

Network OS Message Reference 209
53-1002489-01
Chapter
44
AUDIT SEC System Messages
SEC-3014
Message <sequence-number> AUDIT, <timestamp>, [SEC-3014], INFO, SECURITY, <User
ID>/<Role>/<IP address>/<Interface>/<app name>,, <switch-name>, Event: <Event
Name>, Status: success, Info: <Event related info> <Event option> server <Server
Name> for AAA services.
Probable Cause Indicates a user has changed the AAA server (RADIUS/TACACS+) configuration.
Recommended
Action
Verify the RADIUS/TACACS+ configuration was changed intentionally. If the RADIUS/TACACS+
configuration was changed intentionally, no action is required. If the security event was not
planned, take appropriate action as defined by your enterprise security policy.
Severity INFO
SEC-3015
Message <sequence-number> AUDIT, <timestamp>, [SEC-3015], INFO, SECURITY, <User
ID>/<Role>/<IP address>/<Interface>/<app name>,, <switch-name>, Event: <Event
Name>, Status: success, Info: Moved <Event option> server <Server name> to
position <New position>.
Probable Cause Indicates a user has changed the position of the remote authentication dial-in user service
(RADIUS)/LDAP server.
Recommended
Action
Verify the RADIUS server position was intentionally changed. If the RADIUS server position was
intentionally changed, no action is required. If the RADIUS server position was not intentionally
changed, take appropriate action as defined by your enterprise security policy.
Severity INFO
SEC-3016
Message <sequence-number> AUDIT, <timestamp>, [SEC-3016], INFO, SECURITY, <User
ID>/<Role>/<IP address>/<Interface>/<app name>,, <switch-name>, Event: <Event
Name>, Status: success, Info: Attribute [<Attribute Name>] of <Attribute related
info> server <server ID> changed <Attribute related info, if any>.
Probable Cause Indicates a user has changed the specified attribute of the remote AAA (RADIUS/TACACS+) server.