HP J9576A - Page 236

6-20
RADIUS Authentication, Authorization, and Accounting
Configuring the Switch for RADIUS Authentication
Figure 6-6. Example of Global Configuration Exercise for RADIUS Authentication
Figure 6-7. Listings of Global RADIUS Parameters Configured In Figure 6-6
HP Switch(config)# show authentication
Status and Counters - Authentication Information
Login Attempts : 2
Respect Privilege : Disabled
| Login Login Login
Access Task | Primary Server Group Secondary
----------- + ---------- ------------ ----------
Console | Local None
Telnet | Radius None
Port-Access | Local Authorized
Webui | Local None
SSH | Radius None
Web-Auth | ChapRadius radius Authorized
MAC-Auth | ChapRadius radius None
| Enable Enable Enable
Access Task | Primary Server Group Secondary
----------- + ---------- ------------ ----------
Console | Local None
Telnet | Radius None
Webui | Local None
SSH | Radius None
HP Switch(config)# show radius
Status and Counters - General RADIUS Information
Deadtime(min) : 5
Timeout(secs) : 3
Retransmit Attempts : 2
Global Encryption Key : My-Global-Key-1099
Dynamic Authorization UDP Port : 3799
Auth Acct DM/ Time
Server IP Addr Port Port CoA Window Encryption Key OOBM
--------------- ---- ---- --- ------ -------------------------------- -----
10.33.18.127 1812 1813 No 10 source0127 No
10.33.18.119 1812 1813 No 10 No
10.33.18.151 1812 1813 No 10
After two attempts failing due to
username or password entry
errors, the switch will terminate
the session.
Global RADIUS parameters
from figure 6-6.
Server-specific encryption key
for the RADIUS server that will
not use the global encryption
key.
These two servers will use the
global encryption key.