HP E3800 Series, Руководство по обеспечению безопасности доступа

Страница: 218 / 732

6-2
RADIUS Authentication, Authorization, and Accounting
Overview
The switch also supports RADIUS accounting for Web Authentication and
MAC authentication sessions.
N o t e
The switch does not support RADIUS security for SNMP (network manage-
ment) access. For information on blocking access through the WebAgent,
refer to “Controlling WebAgent Access” on page 6-35.
Accounting Services
RADIUS accounting on the switch collects resource consumption data and
forwards it to the RADIUS server. This data can be used for trend analysis,
capacity planning, billing, auditing, and cost analysis.
RADIUS-Administered CoS and Rate-Limiting
The switches covered in this guide take advantage of vendor-specific attri-
butes (VSAs) applied in a RADIUS server to support these optional, RADIUS-
assigned attributes:
■ 802.1p (CoS) priority assignment to inbound traffic on the specified
port(s) (port-access authentication only)
■ Per-Port Rate-Limiting on a port with an active link to an authenti-
cated client (port-access authentication only)
RADIUIS-Administered Commands Authorization
This feature enables RADIUS server control of an authenticated client’s access
to CLI commands on the switch. Refer to “Commands Authorization” on page
6-36.
SNMP Access to the Switch’s Authentication
Configuration MIB
The switch’s default configuration allows SNMP access to the hpSwitchAuth
MIB (Management Information Base). A management station running an
SNMP networked device management application such as HP E-PCM Plus or
HP OpenView can access the switch’s MIB for read access to the switch’s
status and read/write access to the switch’s configuration. For more informa-