TACACS+ Authentication
Configuring TACACS+ on the Switch
Using the Privilege-Mode Option for Login
When using TACACS+ to control user access to the switch, you must first login
with your username at the Operator privilege level using the password for
Operator privileges, and then login again with the same username but using
the Manger password to obtain Manager privileges. You can avoid this double
login process by entering the privilege-mode option with the aaa authentication
login command to enable TACACS+ for a single login. The switch authenti-
cates your username/password, then requests the privilege level (Operator or
Manager) that was configured on the TACACS+ server for this username/
password. The TACACS+ server returns the allowed privilege level to the
switch. You are placed directly into Operator or Manager mode, depending on
your privilege level.
ProCurve(config) aaa authentication login privilege-mode
The no version of the above command disables TACACS+ single login capa-
bility.
Syntax: aaa authentication
< console | telnet | ssh >
Selects the access method for configuration.
< enable>
The server grants privileges at the Manager privilege
level.
<login [privilege-mode] >
The server grants privileges at the Operator privilege
level. If the privilege-mode option is entered, TACACS+ is
enabled for a single login. The authorized privilege level
(Operator or Manager) is returned to the switch by the
TACACS+ server.
Default: Single login disabled.
< local | tacacs | radius >
Selects the type of security access:
local — Authenticates with the Manager and Operator
password you configure in the switch.
tacacs — Authenticates with a password and other
data configured on a TACACS+ server.
radius — Authenticates with a password and other
data configured on a RADIUS server.
4-11
To Next Page
Loading...
