Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > User Device Tracker (UDT) > UDT fails to display logins when IPv6 to IPv4 translation happens

UDT fails to display logins when IPv6 to IPv4 translation happens

Table of contents
No headers
Created by Interspire Import, last modified by MindTouch on Jun 23, 2016

Views: 10 Votes: 0 Revisions: 7

Issue:

User Device Tracker (UDT) fails to display user logins when IPv6 to IPv4 translation happens. The event log shows event message 4768 stating a successful attempt. 

Explanation and Resolution:

Event message 4768 does state a successful attempt yet the client address is listed as ::ffff:a.b.c.d vs a.b.c.d. The additional field (:ffff) happens when the Stateless IP/ICMP Translation Algorithm is applied. This algorithm is necessary for IPv6 to communicate with IPv4. For more information on this algorithm, see "RFC2765." 

To resolve, enable Audit Kerbos Service Ticket Operatons on your Domain Controller.

Expected Results:

UDT displays user logins when IPv6 to IPv4 translation happens.

Last modified
04:04, 23 Jun 2016

Tags

Classifications

Public