SROS Command Line Interface Reference Guide
Global Configuration Mode Command Set
5991-2114
© Copyright 2007 Hewlett-Packard Development Company, L.P.
322
Methods fail (and therefore cause the system to proceed to the next configured method) under circumstances
such as the following:
•
LINE and ENABLE passwords fall through if there is no LINE or ENABLE password configured.
•
LOCAL USERS fall through if the given user is not in the database.
•
RADIUS or servers fall through if the given server(s) cannot be contacted on the network.
Example
For a default list defined with the order [LINE, ENABLE, LOCAL, and GROUP
mygroup
], the following
statements are true:
•
If there is no LINE password, the list falls through to the ENABLE password.
•
If there is no ENABLE password, the AAA system prompts the user for a username and password for
the local user database.
•
If the given user is not in the local list, the username and password are handed to the remote servers
defined in
mygroup
.
•
A failure at any point (password not matching) denies access.
If the AAA process falls through the list completely, system behavior is based on portal:
•
CONSOLE access is granted if the process falls completely through (this prevents a lock-out condition).
•
TELNET and FTP are denied access.
Usage Examples
The following example activates the AAA subsystem:
ProCurve(config)#
aaa on
