ProCurve 3400cl Technical Information Page 79
- Page / 314
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
TACACS+ Authentication
General System Requirements
General System Requirements
To use TACACS+ authentication, you need the following:
■ A TACACS+ server application installed and configured on one or
more servers or management stations in your network. (There are
several TACACS+ software packages available.)
■ A switch configured for TACACS+ authentication, with access to one
or more TACACS+ servers.
Notes The effectiveness of TACACS+ security depends on correctly using your
TACACS+ server application. For this reason, HP recommends that you
thoroughly test all TACACS+ configurations used in your network.
TACACS-aware HP switches include the capability of configuring multiple
backup TACACS+ servers. HP recommends that you use a TACACS+ server
application that supports a redundant backup installation. This allows you to
configure the switch to use a backup TACACS+ server if it loses access to the
first-choice TACACS+ server.
TACACS+ does not affect web browser interface access. Refer to “Controlling
Web Browser Interface Access When Using TACACS+ Authentication” on
page 4-24.
General Authentication Setup Procedure
It is important to test the TACACS+ service before fully implementing it.
Depending on the process and parameter settings you use to set up and test
TACACS+ authentication in your network, you could accidentally lock all
users, including yourself, out of access to a switch. While recovery is simple,
it may pose an inconvenience that can be avoided.To prevent an unintentional
lockout on the switch, use a procedure that configures and tests TACACS+
protection for one access type (for example, Telnet access), while keeping the
4-5
- Access Security Guide 1
- HP ProCurve 1
- Series 5300xl Switches 1
- Series 3400cl Switches 1
- HP Procurve 3
- 4 TACACS+ Authentication 7
- 8 Traffic/Security Filters 9
- Contents 10
- 12 Key Management System 12
- Getting Started 13
- Introduction 14
- Guideline 16
- Command Syntax Conventions 17
- Simulating Display Output 18
- Related Publications 19
- Sources for More Information 22
- Need Only a Quick Start? 23
- Network 23
- Menu: Setting Passwords 29
- Front-Panel Security 32
- When Security Is Important 33
- Front-Panel Button Functions 34
- Reset Button 35
- Password Recovery 42
- [Y] (for “Yes”) 43
- [N] (for “No”) 43
- Password Recovery Process 44
- Web and MAC Authentication 45
- Client Options 47
- General Features 48
- Operate 49
- MAC-based Authentication 51
- Operating Rules and Notes 54
- RADIUS Server 58
- Based Authentication 70
- Client Status 73
- Terminology Used in TACACS 77
- Applications: 77
- General System Requirements 79
- Note on 81
- Privilege Levels 81
- Caution 81
- BeforeYou Begin 82
- Configuration 83
- Caution Regarding 87
- Login Primary 87
- Encryption Keys 90
- First-Choice TACACS+ Server 92
- How Authentication Operates 94
- Using the Encryption Key 97
- Access When Using TACACS+ 98
- Messages Related to TACACS+ 99
- TACACS+ Authentication 100
- Operating Notes 100
- Overview 102
- Terminology 103
- Authentication 106
- Want RADIUS To Protect 108
- The switch now 109
- SSH authentication 109
- Local Authentication Process 115
- Access When Using RADIUS 116
- ■ IP address: 10.33.18.151 120
- ■ Start-Stop: 122
- ■ Stop-Only: 122
- Viewing RADIUS Statistics 124
- RADIUS Accounting Statistics 127
- Prerequisite for Using SSH 135
- Public Key Formats 135
- Operation 139
- Host Public 142
- Key for the 142
- Bit Size 143
- Exponent <e> 143
- Modulus <n> 143
- Client Contact Behavior 145
- ■ Execute no ip ssh 146
- Public-Key Authentication 152
- Bit Size Exponent <e> 153
- Comment 153
- Key Index Number 155
- Prerequisite for Using SSL 163
- Password Button 166
- Security Tab 166
- Generate New Key 169
- Enter certificate Arguments 169
- Generate New Certificate 169
- [SSL] button 172
- Current SSL Host Certificate 173
- Browser Contact Behavior 175
- Enable SLL 178
- Common Errors in SSL setup 179
- Traffic/Security Filters 181
- Filter Types and Operation 183
- Source-Port Filters 184
- Example 185
- Forward action. (Default: 189
- Editing a Source-Port Filter 191
- (5300xl Switches Only) 192
- Filter Indexing 193
- (802.1x) 197
- How 802.1x Operates 201
- as defined in the 204
- 802.1x standard 204
- Access Control (802.1x) 207
- Authenticators 210
- 802.1x Open VLAN Mode 216
- Unauthorized-Client VLANs 220
- 802.1x Devices 227
- Blocking a 228
- Non-802.1x 228
- Other Switches 229
- Statistics, and Counters 233
- ■ The switch reboots 238
- After the 802.1x session 242
- < port-number >: 243
- Port Security 247
- Trunk Group Exclusion 249
- Planning Port Security 250
- Configuring Port Security 254
- MAC Lockdown 264
- MAC Lockdown Operating Notes 267
- Deploying MAC Lockdown 268
- MAC Lockout 272
- Security Features 275
- Alert Flags 275
- Send-Disable 277
- Resetting Alert Flags 278
- Using Authorized IP Managers 285
- Options 287
- Access Levels 287
- Stations 288
- Managers 289
- Building IP Masks 293
- IP Entry 294
- Key Management System 299
- Numerics 307
- 2 – Index 308
- Index – 3 309
- 4 – Index 310
- Index – 5 311
- 6 – Index 312
- 5990-6052 314
Related products and manuals for Network switches ProCurve 3400cl
Network switches ProCurve 8200zl Specifications
(144 pages)
(144 pages)
© 2020, manymanuals.com. All rights reserved. | 0.417 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals