To Next Page

To Previous Page

2-33

Controlling Management Access to the ProCurve Secure Router

Using the AAA Subsystem to Control Management Access

Table 2-4. Customizing Settings for Individual RADIUS Servers

For example, you might enter:

ProCurve(config)# radius-server host 192.168.115.5 acct-port 1646 key secret

After you define a RADIUS server, that server is added to the router’s default

RADIUS group. If you define a second RADIUS server, it is added to the default

group, and the Secure Router OS contacts the servers in the order in which

you entered them. Once you define the RADIUS servers in the default group,

this order cannot be changed.

If you want to change the order in which the Secure Router OS contacts the

RADIUS servers, you should create a RADIUS server group, as described in

the next section.

Define a Group of RADIUS Servers

To define a group of RADIUS servers, enter the following command from the

global configuration mode context:

Syntax: aaa group server radius <groupname>

Replace <groupname> with a name that is meaningful to you.

For example, the following command creates a group called myServers and

enters the RADIUS group configuration mode context:

ProCurve(config)# aaa group server radius myServers

ProCurve(config-sg-radius)#

Option Meaning Default Value

acct-port <port number> Configures the router to send accounting requests to the port

you specify. You can specify a number between 0 and 65535.

acct-port 1813

auth-port <port number> Configures the router to send authentication requests to the

port you specify. You can specify a number between 0 and 65535.

auth-port 1812

retransmit <attempts> Specifies the number of times the router tries to contact the

RADIUS server after the timeout expires. You can specify a

number between 1 and 100.

global RADIUS setting

timeout <seconds> Specifies the number of seconds the router waits if it does not

receive a response from the RADIUS server. You can specify a

number between 1 and 1000.

global RADIUS setting

key <key> Defines the shared key the router uses to authenticate to the

RADIUS server.

none

HP ProCurve 7000dl Series User Manual

Questions and Answers: