HP Switch 6120 Instrukcja Użytkownika Strona 158
- Strona / 469
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
4-21
TACACS+ Authentication
Configuring TACACS+ on the Switch
Adding, Removing, or Changing the Priority of a TACACS+ Server.
Suppose that the switch was already configured to use TACACS+ servers at
10.28.227.10 and 10.28.227.15. In this case, 10.28.227.15 was entered first, and
so is listed as the first-choice server:
Figure 4-6. Example of the Switch with Two TACACS+ Server Addresses Configured
To move the “first-choice” status from the “15” server to the “10” server, use
the
no tacacs-server host <ip-addr> command to delete both servers, then use
tacacs-server host <ip-addr> to re-enter the “10” server first, then the “15” server.
The servers would then be listed with the new “first-choice” server, that is:
Specifies the optional, global “encryption key” that is also assigned in the TACACS+ server(s) that the switch will access for
authentication. This option is subordinate to any “per-server” encryption keys you assign, and applies only to accessing
TACACS+ servers for which you have not given the switch a “per-server” key. (See the host <ip-addr> [key <key-string> entry
at the beginning of this table.)
For more on the encryption key, see “Using the Encryption Key” on page 4-27 and the documentation provided with your TACACS+
server application.
timeout <1 - 255> 5 sec 1 - 255 sec
Specifies how long the switch waits for a TACACS+ server to respond to an authentication request. If the switch does not detect
a response within the timeout period, it initiates a new request to the next TACACS+ server in the list. If all TACACS+ servers in
the list fail to respond within the timeout period, the switch uses either local authentication (if configured) or denies access (if
none configured for local authentication).
Name Default Range
First-Choice TACACS+ Server
- Access Security Guide 1
- Hewlett-Packard Company 2
- 3 Web and MAC Authentication 6
- 4 TACACS+ Authentication 7
- 10 Configuring Port-Based and 12
- Product Documentation 18
- Software Feature Index 19
- Intelligent Edge Software 20
- Features 20
- Security Overview 23
- Introduction 24
- Access Security Features 25
- Network Security Features 29
- Physical Security 31
- SNMP Security Guidelines 37
- Dynamic Configuration Arbiter 39
- Network Immunity Manager 40
- (IDM) 43
- Menu: Setting Passwords 49
- Security tab 52
- [Device Passwords] 52
- [Apply Changes] 52
- Credentials 54
- Password Command Options 55
- SNMP Security Credentials 56
- Restrictions 64
- Front-Panel Security 66
- Front-Panel Button Functions 67
- Clear Button 68
- Reset Button 68
- ResetClear 69
- Password Recovery 75
- [Y] (for “Yes”) 76
- [N] (for “No”) 76
- Password Recovery Process 77
- MAC Authentication 81
- RADIUS-Based Authentication 83
- Wireless Clients 83
- Web-based Authentication 84
- MAC-based Authentication 86
- Operating Rules and Notes 89
- Setup Procedure for Web/MAC 91
- Web and MAC Authentication 100
- ProCurve Switch (config)# 103
- Files (Optional) 111
- Customizing HTML Templates 112
- Customizable HTML Templates 113
- Overview 127
- Client Status 137
- TACACS+ Authentication 138
- Terminology Used in TACACS 140
- Applications: 140
- General System Requirements 142
- Note on 144
- Privilege Levels 144
- Before You Begin 145
- Configuration 146
- Server Contact Configuration 147
- Authentication Parameters 149
- Caution Regarding 153
- Login Primary 153
- Encryption Keys 156
- First-Choice TACACS+ Server 158
- write mem) 160
- How Authentication Operates 161
- Local Authentication Process 163
- Using the Encryption Key 164
- Access When Using TACACS+ 165
- Authentication 165
- Messages Related to TACACS+ 166
- Operation 166
- Operating Notes 166
- Accounting 168
- Contents 169
- Accounting Services 171
- Configuration MIB 171
- Terminology 172
- You Want RADIUS To Protect 177
- (hpSwitchAuth) is disabled 190
- Commands Authorization 193
- Enabling Authorization 194
- Additional RADIUS Attributes 203
- Configuring RADIUS Accounting 204
- Interim Updating Options 211
- Viewing RADIUS Statistics 213
- RADIUS Accounting Statistics 216
- as both the primary 220
- Prerequisite for Using SSH 225
- Public Key Formats 225
- Enable (Manager) Password 230
- Host Public 232
- Key for the 232
- Configuring Key Lengths 233
- Client Contact Behavior 235
- ■ Execute no ip ssh 237
- Note on Port 239
- Public-Key Authentication 244
- Bit Size Exponent <e> 246
- Modulus <n> 246
- Note on Public 247
- Key Index Number 249
- Logging Messages 251
- Debug Logging 252
- Prerequisite for Using SSL 257
- Password Button 260
- Security Tab 260
- Generate New Key 263
- Enter certificate Arguments 263
- Generate New Certificate 263
- Show host certificate command 264
- [SSL] button 266
- Web browser interface 267
- Browser Contact Behavior 269
- Common Errors in SSL setup 273
- DHCP Snooping 277
- Enabling DHCP Snooping 278
- The DHCP Binding Database 285
- Enabling Debug Logging 286
- Operational Notes 286
- Log Messages 287
- Dynamic ARP Protection 289
- Configuring Trusted Ports 291
- Dynamic IP Lockdown 296
- Prerequisite: DHCP Snooping 297
- Enabling Dynamic IP Lockdown 299
- Database 301
- Adding a Static Binding 302
- Bindings 303
- Debugging Dynamic IP Lockdown 304
- Examples 309
- Filter Types and Operation 313
- Source-Port Filters 314
- Named Source-Port Filters 316
- [ index ] 318
- * ), indicating that the 327
- Editing a Source-Port Filter 328
- Filter Indexing 329
- Configuring Port-Based and 331
- User Authentication Methods 334
- as defined in the 337
- 802.1X standard 337
- VLAN Membership Priority 340
- Access Control 344
- Authenticators 348
- Based Authentication 350
- Wake-on-LAN Traffic 357
- 802.1X Open VLAN Mode 359
- VLAN Membership Priorities 360
- Unauthorized-Client VLANs 366
- Configure Port-Security 375
- Port-Security 376
- Other Switches 377
- Supplicant Port Configuration 379
- Statistics, and Counters 381
- ■ The switch reboots 394
- Affects VLAN Operation 395
- VLAN Assignment on a Port 396
- Based Authentication Session 398
- After the 802.1X session 401
- < port-number >: 403
- Port Security 407
- Eavesdrop Protection 408
- Blocking Unauthorized Traffic 408
- Trunk Group Exclusion 409
- Planning Port Security 410
- Port Security Display Options 411
- Configuring Port Security 415
- listing 418
- use this command syntax: 418
- Retention of Static Addresses 420
- MAC Lockdown 425
- MAC Lockdown Operating Notes 428
- MAC Lockout 429
- # VLANs # Lockout MACs 431
- < = 1024 16 431
- 1025-2048 8 431
- Port Security and MAC Lockout 432
- Security Features 433
- Alert Flags 433
- Send-Disable 435
- Resetting Alert Flags 436
- Yes” for the port on which 437
- Using Authorized IP Managers 443
- Access Levels 445
- Stations 446
- Managers 447
- Building IP Masks 452
- IP Entry 453
- Numerics 457
- 2 – Index 458
- Index – 3 459
- 4 – Index 460
- Index – 5 461
- 6 – Index 462
- Index – 7 463
- 8 – Index 464
- Index – 9 465
- 10 – Index 466
- Index – 11 467
- 12 – Index 468
- *5992-5525* 469
Powiązane produkty i podręczniki dla Oprogramowanie HP Switch 6120
Oprogramowanie HP BMD00022 Instrukcja Użytkownika
(228 strony)
(228 strony)
Oprogramowanie HP SN6000 Podręcznik Użytkownika
(122 strony)
(122 strony)
Oprogramowanie HP 3PAR Instrukcja Użytkownika
(89 strony)
(89 strony)
Oprogramowanie HP 700wl Instrukcja Użytkownika
(388 strony)
(388 strony)
Oprogramowanie HP X9300 Przewodnik Instalacji
(151 strony)
(151 strony)
Oprogramowanie HP SP1 Instrukcja Użytkownika
(143 strony)
(143 strony)
Oprogramowanie HP 2000s Podręcznik Użytkownika
(200 strony)
(200 strony)
Oprogramowanie HP 2012i Instrukcja Użytkownika
(86 strony)
(86 strony)
Oprogramowanie HP XP12000 Instrukcja Użytkownika
(38 strony)
(38 strony)
Oprogramowanie HP 1TB Instrukcja Użytkownika
(80 strony)
(80 strony)
Oprogramowanie HP M401dne Instrukcja Użytkownika
(160 strony)
(160 strony)
Oprogramowanie HP 441877-00B Instrukcja Użytkownika
(176 strony)
(176 strony)
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.159 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji