5-19
Authentication
Configuring on the Switch
Name
Default
Range
host <
ip-addr
> [key <
key-string
>]
| [oobm]
none
n/a
Specifies the IP address of a device running a server application. Optionally, can also specify the unique, per-
server encryption key to use when each assigned server has its own, unique key. For more on the encryption key, see
“Using the Encryption Key” on page 5-26 and the documentation provided with your server application.
For switches that have a separate out-of-band management port, the
oobm
parameter specifies that the traffic
will go through the out-of-band management (OOBM) port.
You can enter up to three IP addresses; one first-choice and two (optional) backups (one second-choice and one third-
choice).
Use
show tacacs
to view the current IP address list.
If the first-choice server fails to respond to a request, the switch tries the second address, if any, in the show
tacacs list. If the second address also fails, then the switch tries the third address, if any.
(See figure 5-3, “Example of the Switch’s Configuration Listing” on 5-9.)
The priority (first-choice, second-choice, and third-choice) of a server in the switch’s configuration
depends on the order in which you enter the server IP addresses:
1.When there are no servers configured, entering a server IP address makes that server the first-choice
server.
2.When there is one serves already configured, entering another server IP address makes that server the
second-choice (backup) server.
3.When there are two servers already configured, entering another server IP address makes that server
the third-choice (backup) server.
• The above position assignments are fixed. Thus, if you remove one server and replace it with another, the new server
assumes the priority position that the removed server had. For example, suppose you configured three servers, A, B,
and C, configured in order:
First-Choice:
A
Second-Choice:
B
Third-Choice: C
• If you removed server B and then entered server X, the server order of priority would be:
First-Choice:
A
Second-Choice:
X
Third-Choice: C
Summary of Contents for E3800 Series
Page 2: ......
Page 3: ...HP Networking E3800 Switches Access Security Guide September 2011 KA 15 03 ...
Page 30: ...xxviii ...
Page 86: ...2 36 Configuring Username and Password Security Password Recovery ...
Page 186: ...4 72 Web and MAC Authentication Client Status ...
Page 364: ...8 32 Configuring Secure Shell SSH Messages Related to SSH Operation ...
Page 510: ...10 130 IPv4 Access Control Lists ACLs General ACL Operating Notes ...
Page 548: ...11 38 Configuring Advanced Threat Protection Using the Instrumentation Monitor ...
Page 572: ...12 24 Traffic Security Filters and Monitors Configuring Traffic Security Filters ...
Page 730: ...20 Index ...
Page 731: ......