HP 4100GL Instrukcja Użytkownika Strona 34
- Strona / 228
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
TACACS+ Authentication
General Authentication Setup Procedure
Notes The effectiveness of TACACS+ security depends on correctly using your
TACACS+ server application. For this reason, HP recommends that you
thoroughly test all TACACS+ configurations used in your network.
TACACS-aware HP switches include the capability of configuring multiple
backup TACACS+ servers. HP recommends that you use a TACACS+ server
application that supports a redundant backup installation. This allows you to
configure the switch to use a backup TACACS+ server if it loses access to the
first-choice TACACS+ server.
In release G.05.xx, TACACS+ does not affect web browser interface access.
Refer to
“Controlling Web Browser Interface Access When Using TACACS+
Authentication” on page 2-24.
General Authentication Setup Procedure
It is important to test the TACACS+ service before fully implementing it.
Depending on the process and parameter settings you use to set up and test
TACACS+ authentication in your network, you could accidentally lock all
users, including yourself, out of access to a switch. While recovery is simple,
it may pose an inconvenience that can be avoided.To prevent an unintentional
lockout on a Series 4100GL switch, use a procedure that configures and tests
TACACS+ protection for one access type (for example, Telnet access), while
keeping the other access type (console, in this case) open in case the Telnet
access fails due to a configuration problem. The following procedure outlines
a general setup procedure.
Note If a complete access lockout occurs on the switch as a result of a TACACS+
configuration, see "Troubleshooting TACACS+ Operation" in the Trouble
shooting chapter of the Management and Configuration Guide for your
switch.
1. Familiarize yourself with the requirements for configuring your
TACACS+ server application to respond to requests from a Series 4100GL
switches. (Refer to the documentation provided with the TACACS+
server software.) This includes knowing whether you need to configure
an encryption key. (See
“Using the Encryption Key” on page 2-23.)
2-6
- HP Procurve Series 4100GL 3
- Switches 3
- 2 TACACS+ Authentication 6
- Getting Started 13
- Introduction 14
- Command Syntax Conventions 16
- Simulating Display Output 16
- Related Publications 17
- Sources for More Information 20
- Need Only a Quick Start? 21
- Menu: Setting Passwords 26
- TACACS+ Authentication 29
- Software 31
- Release G.05. xx 31
- Terminology Used in TACACS 32
- Applications: 32
- General System Requirements 33
- Privilege Levels 35
- Before You Begin 37
- Configuration 38
- Caution Regarding 41
- Login Primary 41
- Note on 44
- Encryption Keys 44
- First-Choice TACACS+ Server 46
- How Authentication Operates 48
- Local Authentication Process 50
- Using the Encryption Key 51
- Access When Using TACACS+ 52
- Authentication 52
- Messages Related to TACACS+ 53
- Preparation: 59
- Want RADIUS To Protect 62
- The switch now 63
- SSH authentication 63
- Access When Using RADIUS 69
- IP address: 10.33.18.151 73
- Stop-Only: 75
- Start-Stop: 75
- Viewing RADIUS Statistics 77
- RADIUS Accounting Statistics 80
- Prerequisite for Using SSH 88
- Public Key Formats 89
- Host Public 96
- Key for the 96
- Bit size 97
- Exponent <e> 97
- Modulus <n> 97
- Client Contact Behavior 99
- Execute no ip ssh 100
- Public-Key Authentication 106
- Bit Size Exponent 107
- <e> 107
- Modulus 107
- <n> 107
- Comment 107
- Key Index 109
- Contents 113
- Overview 114
- Terminology 115
- Prerequisite for Using SSL 116
- Operation 119
- Password 120
- Security Tab 120
- Show host certificate 124
- Current SSL 127
- Host Certificate 127
- Browser Contact Behavior 129
- Enable SLL 132
- Common Errors in SSL setup 133
- (802.1x) 135
- Overview 136
- How 802.1x Operates 139
- as defined in the 142
- 802.1x standard 142
- Access Control (802.1x) 145
- Authenticators 148
- 802.1x Open VLAN Mode 154
- 802.1x Open VLAN Mode 155
- Unauthorized-Client VLANs 158
- 802.1x Devices 165
- Blocking a Non 166
- 802.1x Device 166
- Other Switches 167
- Statistics, and Counters 171
- The switch reboots 176
- After the 802.1x session 180
- Basic Operation 184
- • PC1 can access Switch A 186
- Planning Port Security 187
- Configuring Port Security 192
- Security Features 197
- Alert Flags 197
- Resetting Alert Flags 199
- Yes” for the port on which 201
- Options 209
- Access Levels 209
- Stations 210
- Managers 211
- Building IP Masks 215
- IP Entry 216
- Operating Notes 218
- Using Authorized IP Managers 219
- Index – 1 221
- 2 – Index 222
- Index – 3 223
- 4 – Index 224
- Index – 5 225
- 6 – Index 226
- 5990-3032 228
Powiązane produkty i podręczniki dla Oprogramowanie HP 4100GL
(301 strony)© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.070 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji