HP 10500 series, Security Configuration Manual

Page: 31 / 596

17
No. Subattribute Description
206
Output-Interval-Gigaword
s Amount of bytes output within an accounting interval, in units of 4G
bytes.
207 Backup-NAS-IP Backup source IP address for sending RADIUS packets.
210 Av-Pair
User-defined attribute pair. Available attribute pairs include:
•
Dynamically assigned WEP key in the format of
leap:session-key
=
xxx.
•
Server-assigned voice VLAN in the format of
device-traffic-class=voice.
•
Server-assigned user role in the format of shell:role
=
xxx.
•
Server-assigned ACL in the format of url-redirect-acl=xxx.
•
Server-assigned Web redirect URL in the format of
url-redirect=xxx.
250 WEB-URL Web redirect URL for users.
255 Product_ID Product name.
FIPS compliance
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for
features, commands, and parameters might differ in FIPS mode (see "
Configuring FIPS ") and
non-FIPS mode.
AAA configuration considerations and task list
To configure AAA, complete the following tasks on the NAS:
1. Configure the required AAA schemes:
{
Local authentication —Configure local users and the related attributes, including the
usernames and passwords, for the users to be authenticated.
{
Remote authentication —Configure the required RADIUS, HWTACACS, and LDAP
schemes.
2. Configure AAA methods for the users' ISP domains. Remote AAA methods need to reference
the configured RADIUS, HWTACACS, and LDAP schemes.