HP ProCurve 5406zl Access Security Guide

TACACS+ Authentication
Terminology Used in TACACS Applications:
TACACS+ server for authentication services. If the switch fails to connect to
any TACACS+ server, it defaults to its own locally assigned passwords for
authentication control if it has been configured to do so. For both Console
and Telnet access you can configure a login (read-only) and an enable (read/
write) privilege level access.
TACACS+ does not affect web browser interface access. See “Controlling Web
Browser Interface Access” on page 5-24.
Terminology Used in TACACS
Applications:
■ NAS (Network Access Server): This is an industry term for a
TACACS-aware device that communicates with a TACACS server for
authentication services. Some other terms you may see in literature
describing TACACS operation are communication server, remote
access server, or terminal server. These terms apply to a switch when
TACACS+ is enabled on the switch (that is, when the switch is
TACACS-aware).
■ TACACS+ Server: The server or management station configured as
an access control server for TACACS-enabled devices. To use
TACACS+ with a switch covered in this guide and any other TACACS-
capable devices in your network, you must purchase, install, and
configure a TACACS+ server application on a networked server or
management station in the network. The TACACS+ server application
you install will provide various options for access control and access
notifications. For more on the TACACS+ services available to you,
see the documentation provided with the TACACS+ server applica-
tion you will use.
■ Authentication: The process for granting user access to a device
through entry of a user name and password and comparison of this
username/password pair with previously stored username/password
data. Authentication also grants levels of access, depending on the
privileges assigned to a user name and password pair by a system
administrator.
• Local Authentication: This method uses username/password
pairs configured locally on the switch; one pair each for manager-
level and operator-level access to the switch. You can assign local
usernames and passwords through the CLI or web browser inter-
5-3

HP ProCurve 5406zl Specifications

General

Product Name	HP ProCurve 5406zl
Category	Switch
Layer	Layer 3
Operating Temperature	32°F to 131°F (0°C to 55°C)
Operating Humidity	15% to 95% non-condensing
Management	SNMP, CLI
Power Supply	Redundant power supplies (optional)
Memory	128 MB flash, 512 MB SDRAM