Demand test descriptions and error codes - Avaya Support

LOG-SVN (Login Security Violation)
5. Use enable login to enable a login that has been disabled, and to retire any login
security violation alarms associated with the login ID.
6. To use enable login to enable a login and/or retire alarms, use a login ID with greater
service level hierarchy permissions.
7. Access to enable login is controlled through the Administer Permissions field on the
Command Permission Categories screen. Set the Administer Permissions field to y to
access enable login.
8. The Port alarm report field identifies the port where the final invalid login attempt, involving
the alarmed login ID, was detected.
9. The Svc State alarm report field will be set to OUT if the login ID is in the disabled state as
a result of detection of a security violation involving the login ID. Once the login ID has
been enabled, the field will be set to IN.
10. The source or reason of the failed login attempts should be identified and the cause
corrected prior to re-enabling a login ID and/or retiring any alarms associated with the login
ID. The cause may be something as innocuous as the failure of Avaya services automatic
login software, to something as insidious as a hacker attempting to gain access to the
switch system management interface.
Prior to retiring an SVN alarm and enabling the associated login ID, use monitor
security-violations login to access information about the invalid login attempts that
caused the security violation. This information can be useful in determining the source of the
invalid attempts and analyzing why they occurred.
Use list logins to see status information about logins on the system. If a login has been
disabled as a result of a security violation, the status is svn-disabled.
Procedure to Retire SVN Alarm
To retire a SVN alarm:
1. Enter enable login loginID.
The login ID associated with that alarm is displayed in the Alt Name field of the alarm
report and the alarm is retired.
Issue 5 May 2009 581