HP HP ProCurve Series 6600, Руководство по обеспечению безопасности доступа

Страница: 66 / 778

2-12
Configuring Username and Password Security
Saving Security Credentials in a Config File
■ By storing different security settings in different files, you can test
different security configurations when you first download a new software
version that supports multiple configuration files, by changing the
configuration file used when you reboot the switch.
For more information about how to experiment with, upload, download, and
use configuration files with different software versions, refer to the following:
■ The chapter on “Switch Memory and Configuration” in the Basic
Operation Guide .
■ “Configuring Local Password Security” on page 2-4 in this guide.
Enabling the Storage and Display of Security
Credentials
To enable the security settings, enter the
include-credentials
command.
Syntax: [no] include-credentials [radius-tacacs-only | store-in-config]
Enables the inclusion and display of the currently configured
manager and operator usernames and passwords, RADIUS shared
secret keys, SNMP and 802.1X authenticator (port-access) security
credentials, and SSH client public-keys in the running
configuration. (Earlier software releases store these security
configuration settings only in internal flash memory and do not
allow you to include and view them in the running-config file.)
To view the currently configured security settings in the running
configuration, enter one of the following commands:
■ show running-config : Displays the configuration settings in the
current running-config file .
■
write terminal
: Displays the configuration settings in the current
running-config file .
For more information, refer to “Switch Memory and
Configuration” in the Basic Operation Guide.
To view the current status of include-credentials on the switch,
enter
show include-credentials . See “Displaying the Status of Include-
Credentials on the Switch” on page 2-24.
The “
no
” form of the command disables only the display and copying
of these security parameters from the running configuration, while
the security settings remain active in the running configuration.
Default: The security credentials described in “Security Settings
that Can Be Saved” on page 2-13 are not stored in the running
configuration.