HPE FlexFabric 5940 SERIES, Security Configuration Manual

Page: 32 / 571

19
No. Subattribute Description
250 WEB-URL Redirect URL for users.
251 Subscriber-ID Family plan ID.
252 Subscriber-Profile QoS policy name for the family plan of the subscriber.
255 Product_ID Product name.
FIPS compliance
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for
features, commands, and parameters might differ in FIPS mode (see "
Configuring FIPS ") and
non-FIPS mode.
AAA configuration considerations and task list
To configure AAA, complete the following tasks on the NAS:
1. Configure the required AAA schemes:
{
Local authentication —Configure local users and the related attributes, including the
usernames and passwords, for the users to be authenticated.
{
Remote authentication —Configure the required RADIUS, HWTACACS, and LDAP
schemes.
2. Configure AAA methods for the users' ISP domains. Remote AAA methods need to use the
configured RADIUS, HWTACACS, and LDAP schemes.
Figure 11 AAA configuration procedure
To configure AAA, perform the following tasks:
Tasks at a glance
(Required.) Perform a minimum one of the following tasks to configure local users or AAA schemes:
•
Configuring local users
•
Configuring RADIUS schemes
Configure the RADIUS, HWTACACS,
or LDAP schemes to be used
none / local (the default) / scheme
Authorization method
Accounting method
Configure AAA methods for
different types of users or/and
the default methods for all
types of users
Create an ISP domain
and enter ISP domain
view
Authentication method
Configure local users and related
attributes
none / local (the default) / scheme
+
+
Local AAA
Remote AAA
No AAA
none / local (the default) / scheme