HP E3800 Series User Manual

ix
Commands Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-36
Enabling Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-37
Displaying Authorization Information . . . . . . . . . . . . . . . . . . . . . . . . . 6-38
Configuring Commands Authorization on a RADIUS Server . . . . . . 6-38
Using Vendor Specific Attributes (VSAs) . . . . . . . . . . . . . . . . . . . 6-38
Example Configuration on Cisco Secure ACS for MS Windows 6-40
Example Configuration Using FreeRADIUS . . . . . . . . . . . . . . . . . 6-43
VLAN Assignment in an Authentication Session . . . . . . . . . . . . . . . . 6-44
Tagged and Untagged VLAN Attributes . . . . . . . . . . . . . . . . . . . . . . . . 6-44
Additional RADIUS Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-45
Accounting Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-48
Accounting Service Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-48
Operating Rules for RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . 6-49
Acct-Session-ID Options in a Management Session . . . . . . . . . . . . . . 6-50
Unique Acct-Session-ID Operation . . . . . . . . . . . . . . . . . . . . . . . . 6-50
Common Acct-Session-ID Operation . . . . . . . . . . . . . . . . . . . . . . . 6-52
Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-53
Steps for Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . 6-53
1. Configure the Switch To Access a RADIUS Server . . . . . . . . . 6-54
2. (Optional) Reconfigure the Acct-Session-ID Operation . . . . . 6-56
3. Configure Accounting Types and the Controls for Sending
Reports to the RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-57
4. (Optional) Configure Session Blocking and Interim
Updating Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-61
Viewing RADIUS Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-62
General RADIUS Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-62
RADIUS Authentication Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-64
RADIUS Accounting Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-66
Changing RADIUS-Server Access Order . . . . . . . . . . . . . . . . . . . . . . . 6-67
Dynamic Removal of Authentication
Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-70
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-70
Configuring the RADIUS VSAs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-70
Displaying the Port-access Information . . . . . . . . . . . . . . . . . . . . . . . . 6-72
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-73

HP E3800 Series Specifications

General

Model	HP E3800 Series
Layer	Layer 3
Uplink Ports	4 x SFP+ ports
Stacking	Yes
Power over Ethernet (PoE)	Available on some models
Management	Web, CLI, SNMP
Power Supply	Redundant (optional)
Operating Temperature	0°C to 45°C
Dimensions (W x D x H)	440 x 424 x 44 mm
Operating Humidity	10% to 90% non-condensing