HP ProCurve 5406zl Access Security Guide

5
TACACS+ Authentication
Contents
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2
Terminology Used in TACACS Applications: . . . . . . . . . . . . . . . . . . . . 5-3
General System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
General Authentication Setup Procedure . . . . . . . . . . . . . . . . . . . . . . . 5-5
Configuring TACACS+ on the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8
CLI Commands Described in this Section . . . . . . . . . . . . . . . . . . . . . . . 5-9
Viewing the Switch’s Current Authentication Configuration . . . . . . . 5-9
Viewing the Switch’s Current TACACS+
Server Contact Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
Configuring the Switch’s Authentication Methods . . . . . . . . . . . . . . . 5-11
Configuring the Switch’s TACACS+ Server Access . . . . . . . . . . . . . . 5-15
How Authentication Operates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-20
General Authentication Process Using a TACACS+ Server . . . . . . . . 5-20
Local Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-22
Using the Encryption Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
General Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Encryption Options in the Switch . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Controlling Web Browser Interface
Access When Using TACACS+ Authentication . . . . . . . . . . . . . . . . . . 5-24
Messages Related to TACACS+ Operation . . . . . . . . . . . . . . . . . . . . . 5-25
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-25
5-1

HP ProCurve 5406zl Specifications

General

Product Name	HP ProCurve 5406zl
Category	Switch
Layer	Layer 3
Operating Temperature	32°F to 131°F (0°C to 55°C)
Operating Humidity	15% to 95% non-condensing
Management	SNMP, CLI
Power Supply	Redundant power supplies (optional)
Memory	128 MB flash, 512 MB SDRAM