HP HP ProCurve Series 6600 Instrukcja Użytkownika Pobierz pdf (Strona 11)

Recommendation:

Always verify the switch settings and set the access to restricted. Preferably use SNMPv3 if you want to write to

relevant parts of the MIB tree, or at least set a different community string and limit access to the switch

management with the ip authorized-managers setting.

1.12

Authentication by Radius Servers

Authentication by radius servers can be used for switch management access authentication. Radius server

services can also be used to authenticate users for the 802.1x protocol. Only one common set of radius servers

can be used to access the management and authenticate users.

Definition of radius servers and encryption key:

hp-test(config)# radius-server host 10.229.255.15 key secret_password1

hp-test(config)# radius-server host 10.229.255.14 key secret_password2

If radius servers are used only to verify access to management, it is recommended to set the following

parameters:

hp-test(config)# radius-server timeout 1

hp-test(config)# radius-server retransmit 1

If the radius servers are inaccessible for some reason (which is often why you need to access the switch

management), the number of repetitions and timeouts are minimised. Thanks to these parameters, the login

delay will not be unnecessarily long and the switch will start verifying your login data through the internal switch

password sooner.

Next you need to configure services that should be authenticated by the radius server. Here we configure the

authentication method for console access, web, telnet, and ssh access. The authentication method is

configured separately for the login itself and for entering the privileged mode. Define the primary and secondary

authentication method as the command parameters. In the example below the switch tries to authenticate by

the radius server at first and if this fails it authenticates the login data by the internal password of the switch.

hp-test(config)# aaa authentication console login radius local

hp-test(config)# aaa authentication console enable radius local

hp-test(config)# aaa authentication telnet login radius loca

hp-test(config)# aaa authentication telnet enable radius local

hp-test(config)# aaa authentication web login radius local

hp-test(config)# aaa authentication web enable radius local

hp-test(config)# aaa authentication ssh login radius local

hp-test(config)# aaa authentication ssh enable radius local

1 2 ... 6 7 8 9 10 11 12 13 14 15 16 ... 31 32

Brak uwag

HP HP ProCurve Series 6600 Instrukcja Użytkownika Strona 11