HP ProCurve 5406zl Access Security Guide

General Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Encryption Options in the Switch . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Controlling Web Browser Interface
Access When Using TACACS+ Authentication . . . . . . . . . . . . . . . . . . 5-24
Messages Related to TACACS+ Operation . . . . . . . . . . . . . . . . . . . . . 5-25
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-25
6 RADIUS Authentication and Accounting
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3
Authentication Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3
Accounting Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4
RADIUS-Administered CoS and Rate-Limiting . . . . . . . . . . . . . . . . . . . 6-4
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4
Switch Operating Rules for RADIUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-5
General RADIUS Setup Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7
Configuring the Switch for RADIUS Authentication . . . . . . . . . . . . . 6-8
Outline of the Steps for Configuring RADIUS Authentication . . . . . . 6-9
1. Configure Authentication for the Access Methods
You Want RADIUS To Protect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-10
2. Enable the (Optional) Access Privilege Option . . . . . . . . . . . . . . . . 6-12
3. Configure the Switch To Access a RADIUS Server . . . . . . . . . . . . 6-13
4. Configure the Switch’s Global RADIUS Parameters . . . . . . . . . . . 6-15
Local Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-19
Controlling Web Browser Interface Access . . . . . . . . . . . . . . . . . . . . 6-20
Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-21
Operating Rules for RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . 6-22
Steps for Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . 6-23
1. Configure the Switch To Access a RADIUS Server . . . . . . . . . 6-23
2. Configure Accounting Types and the Controls for
Sending Reports to the RADIUS Server
. . . . . . . . . . . . . . . . . 6-25
3. (Optional) Configure Session Blocking and
Interim Updating Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-27
vii

HP ProCurve 5406zl Specifications

General

Product Name	HP ProCurve 5406zl
Category	Switch
Layer	Layer 3
Operating Temperature	32°F to 131°F (0°C to 55°C)
Operating Humidity	15% to 95% non-condensing
Management	SNMP, CLI
Power Supply	Redundant power supplies (optional)
Memory	128 MB flash, 512 MB SDRAM