HP ProCurve 3500yl Series User Manual

5
TACACS+ Authentication
Contents
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2
Terminology Used in TACACS Applications: . . . . . . . . . . . . . . . . . . . . 5-3
General System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
General Authentication Setup Procedure . . . . . . . . . . . . . . . . . . . . . . . 5-5
Configuring TACACS+ on the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8
CLI Commands Described in this Section . . . . . . . . . . . . . . . . . . . . . . . 5-9
Viewing the Switch’s Current Authentication Configuration . . . . . . . 5-9
Viewing the Switch’s Current TACACS+
Server Contact Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
Configuring the Switch’s Authentication Methods . . . . . . . . . . . . . . . 5-11
Configuring the Switch’s TACACS+ Server Access . . . . . . . . . . . . . . 5-15
How Authentication Operates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-20
General Authentication Process Using a TACACS+ Server . . . . . . . . 5-20
Local Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-22
Using the Encryption Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
General Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Encryption Options in the Switch . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Controlling Web Browser Interface
Access When Using TACACS+ Authentication . . . . . . . . . . . . . . . . . . 5-24
Messages Related to TACACS+ Operation . . . . . . . . . . . . . . . . . . . . . 5-25
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-25
5-1

HP ProCurve 3500yl Series Specifications

General

Model	HP ProCurve 3500yl Series
Switching Capacity	176 Gbps
Layer	Layer 3
Input Voltage	100-240 VAC
PoE	Available on some models
Management	Web, CLI, SNMP
Routing Protocol	RIP, OSPF, BGP
Remote Management Protocol	Telnet
Features	VLAN
Power Consumption Operational	Varies by model
Memory	256 MB
Power Supply	Internal
Security Features	802.1X, RADIUS, TACACS+
Ports	24 or 48 x 10/100/1000Base-T ports