Avaya S8700 Maintenance Manual page 1746

Maintenance-Object Repair Procedures
Valid port values for G3r products include:
— SYSAM _LOC — Local administration port
— SYSAM _RMT — Remote administration port
— SYS_PORT — System port
— MAINT — Maintenance port
i. The Svc State alarm report field will be set to OUT if the login ID is in the
disabled state as a result of detection of a security violation involving the
login ID. Once the login ID has been enabled, the field will be set to IN.
j. The source or reason of the failed login attempts should be identified and
the cause corrected prior to re-enabling a login ID and/or retiring any
alarms associated with the login ID. The cause may be something as
innocuous as the failure of Avaya services automatic login software, to
something as insidious as a hacker attempting to gain access to the switch
system management interface.
Prior to retiring an SVN alarm and enabling the associated login ID, the monitor
security-violations login command can be used to access information about the
invalid login attempts that caused the security violation. This information can be
useful in determining the source of the invalid attempts and analyzing why they
occurred.
The list logins command provides status information about logins on the system.
If a login has been disabled as a result of a security violation, the status will be
"son-disabled."
Procedure to Retire SVN Alarm
To retire a SVN alarm:
1. Enter the command enable login login-ID.
The login ID associated with that alarm is displayed in the Alt Name field of
the alarm report and the alarm is retired.
8-1024 Issue 1 May 2002 555-233-143