HP ProCurve 6120G/XG

RADIUS Authentication, Authorization, and Accounting
Contents
Controlling Web Browser Interface Access . . . . . . . . . . . . . . . . . . . . 5-34
Commands Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-35
Enabling Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-36
Displaying Authorization Information . . . . . . . . . . . . . . . . . . . . . . . . . 5-37
Configuring Commands Authorization on a RADIUS Server . . . . . . 5-37
Using Vendor Specific Attributes (VSAs) . . . . . . . . . . . . . . . . . . . 5-37
Example Configuration on Cisco Secure ACS for MS Windows 5-39
Example Configuration Using FreeRADIUS . . . . . . . . . . . . . . . . . 5-41
VLAN Assignment in an Authentication Session . . . . . . . . . . . . . . . . 5-43
Tagged and Untagged VLAN Attributes . . . . . . . . . . . . . . . . . . . . . . . . 5-44
Additional RADIUS Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-45
Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-47
Operating Rules for RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . 5-49
Steps for Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . 5-49
1. Configure the Switch To Access a RADIUS Server . . . . . . . . . 5-50
2. Configure Accounting Types and the Controls for
Sending Reports to the RADIUS Server . . . . . . . . . . . . . . . . . . . . 5-52
3. (Optional) Configure Session Blocking and
Interim Updating Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-54
Viewing RADIUS Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-56
General RADIUS Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-56
RADIUS Authentication Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-58
RADIUS Accounting Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-59
Changing RADIUS-Server Access Order . . . . . . . . . . . . . . . . . . . . . . . 5-60
Messages Related to RADIUS Operation . . . . . . . . . . . . . . . . . . . . . . . 5-63
5-2