To Next Page

To Previous Page

2 Controlling Management Access to the ProCurve

Secure Router

Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Securing Management Access to the ProCurve Secure Router . . . . . . . . . . 2-4

Restricting Access to the Enable Mode Context . . . . . . . . . . . . . . . . . . 2-4

Configuring a Password for Console Access . . . . . . . . . . . . . . . . . . . . . 2-5

Enabling Remote Access to the ProCurve Secure Router . . . . . . . . . . 2-7

Configuring an Ethernet Interface . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7

Configuring Telnet Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8

Configuring Local User Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11

Enabling Access to the Web Browser Interface . . . . . . . . . . . . . . 2-11

Managing SSH Communications . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12

Using FTP to Access the Router . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13

Using the Local User List for Console or Telnet Access . . . . . . . 2-13

Encrypting All the Passwords Configured on the Router . . . . . . . . . 2-13

Enabling Secure Copy Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14

Viewing Information about Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14

Using the AAA Subsystem to Control Management Access . . . . . . . . . . . . 2-15

Advantages of Using the AAA Subsystem . . . . . . . . . . . . . . . . . . . . . . 2-15

Criteria for Failure of Authentication Methods . . . . . . . . . . . . . . 2-16

Enabling the AAA Subsystem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17

Configuring AAA for Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17

Creating a Named List for the Enable Mode Authentication . . . 2-18

Creating a Named List for User Authentication . . . . . . . . . . . . . . 2-19

Assign the Named List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21

Options for AAA Authentication: Configuring Banners,

Messages, and Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22

Configuring Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-24

Creating a Named List to Allow Authorized Users to Access

the Basic Mode Context or the Enable Mode Context . . . . . . . . 2-24

Create a Named List That Allows Authorized Users to

Immediately Enter into the Enable Mode Context . . . . . . . . . . . 2-25

Assign the Named List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-26

Enable Authorization Commands for Console Line . . . . . . . . . . 2-27

HP ProCurve 7000dl Series User Manual

Questions and Answers: