HP ProCurve 2510G Series, Manual

Page: 77 / 320

4-3
Authentication
Configuring on the Switch
the switch first tries to contact a designated server for authentica-
tion services. If the switch fails to connect to any server, it defaults
to its own locally assigned passwords for authentication control if it has been
configured to do so. For both Console and Telnet access you can configure a
login (read-only) and an enable (read/write) privilege level access.
N o t e s
The switch software does not support authorization or accounting
services.
does not affect Web browser interface access. See “Controlling Web
Browser Interface Access” on page 4-28.
Terminology Used in
Applications:
■ NAS (Network Access Server): This is an industry term for a
TACACS-aware device that communicates with a TACACS server for
authentication services. Some other terms you may see in literature
describing TACACS operation are
communication server , remote
access server , or terminal server . These terms apply when
is enabled on the switch (that is, when the switch is TACACS-aware).
■
Server: The server or management station configured as
an access control server for TACACS-enabled devices. To use
with the switch and any other TACACS-capable devices in
your network, you must purchase, install, and configure a
server application on a networked server or management station in
the network. The server application you install will provide
various options for access control and access notifications. For more
on the services available to you, see the documentation
provided with the server application you will use.
■ Authentication: The process for granting user access to a device
through entry of a user name and password and comparison of this
username/password pair with previously stored username/password
data. Authentication also grants levels of access, depending on the
privileges assigned to a user name and password pair by a system
administrator.