5-1
5
Authentication
authentication enables you to use a central server to allow or deny
access to the switches covered in this guide (and other TACACS-aware
devices) in your network. This means that you can use a central database to
create multiple unique username/password sets with associated privilege
levels for use by individuals who have reason to access the switch from either
the switch’s console port (local access) or Telnet (remote access).
Figure 5-1. Example of Operation
Feature
Default
Menu
CLI
Web
view the switch’s authentication configuration
n/a
—
page 5-8 —
view the switch’s server contact
configuration
n/a
—
page 5-9 —
configure the switch’s authentication methods
disabled
—
page
5-10
—
configure the switch to contact server(s) disabled
—
page
5-17
—
B
Switch Configured for
Operation
Terminal “
A
” Directly
Accessing the Switch
Via Switch’s Console
Port
Terminal “
B
” Remotely Accessing The Switch Via Telnet
A
Primary
Server
The switch passes the login
requests from terminals A and B
to the server for
authentication. The
server determines whether to
allow access to the switch and
what privilege level to allow for
a given access request.
Access Request
1 - 4
: Path for Request from
Terminal A (Through Console Port)
TACACS Server
6 - 9:
Path for Request from
Response Terminal B (Through Telnet)
6
2 or 2
3 or 3
9
1
4
Summary of Contents for E3800 Series
Page 2: ......
Page 3: ...HP Networking E3800 Switches Access Security Guide September 2011 KA 15 03 ...
Page 30: ...xxviii ...
Page 86: ...2 36 Configuring Username and Password Security Password Recovery ...
Page 186: ...4 72 Web and MAC Authentication Client Status ...
Page 364: ...8 32 Configuring Secure Shell SSH Messages Related to SSH Operation ...
Page 510: ...10 130 IPv4 Access Control Lists ACLs General ACL Operating Notes ...
Page 548: ...11 38 Configuring Advanced Threat Protection Using the Instrumentation Monitor ...
Page 572: ...12 24 Traffic Security Filters and Monitors Configuring Traffic Security Filters ...
Page 730: ...20 Index ...
Page 731: ......