HP ProCurve Switch 2650

x
Getting Started
Introduction
Introduction
This Access Security Guide is intended for use with the following switches:
 HP Procurve Switch 2650
 HP Procurve Switch 6108
Overview of Access Security Features
 Local Manager and Operator Passwords (page 1-1)
Control access and privileges for the CLI, menu, and web browser
interface.
 TACACS+ Authentication (page 2-1)
Uses an authentication application on a central server to allow or
deny access to Switch 2650 or 6108.
 RADIUS Authentication and Accounting (page 3-1)
Like TACACS+, uses an authentication application on a central server
to allow or deny access to Switch 2650 or 6108. RADIUS also provides
accounting services for sending data about user activity and system
events to a RADIUS server.
 Secure Shell (SSH) Authentication (page 4-1)
Provides encrypted paths for remote access to switch management
functions.
 Port-Based Access Control (802.1x) (page 5-1)
On point-to-point connections, enables the switch to allow or deny
traffic between a port and an 802.1x-aware device (supplicant)
attempting to access the switch. Also enables the switch to operate
as a supplicant for connections to other 802.1x-aware switches.
 Port Security (page 6-1)
Enables a switch port to maintain a unique list of MAC addresses
defining which specific devices are allowed to access the network
through that port. Also enables a port to detect, prevent, and log
access attempts by unauthorized devices.
 Authorized IP Managers (page 7-1)
Allows access to the switch by a networked device having an IP
address previously configured in the switch as "authorized".
!FishSecurity.book Page x Thursday, October 10, 2002 9:19 PM