HP HP ProCurve Series 6600, Руководство по обеспечению безопасности доступа

Страница: 73 / 778

2-19
Configuring Username and Password Security
Saving Security Credentials in a Config File
server application. (The encryption key is sometimes referred to as
“shared secret” or “secret” key.) For more information, see “
Authentication” on page 5-1 in this guide
.
shared secret (encryption) keys can be saved in a configuration file
by entering this command:
HP Switch(config)# tacacs-server key <keystring>
The option < keystring > is the encryption key (in clear text) used for secure
communication with all or a specific server.
RADIUS Shared-Secret Key Authentication
You can use RADIUS servers as the primary authentication method for users
who request access to a switch through Telnet, SSH, WebAgent, console, or
port-access (802.1X). The shared secret key is a text string used to encrypt
data in RADIUS packets transmitted between a switch and a RADIUS server
during authentication sessions. Both the switch and the server have a copy of
the key; the key is never transmitted across the network. For more
information, refer to “3. Configure the Switch To Access a RADIUS Server” on
page 6-15 in this guide
.
RADIUS shared secret (encryption) keys can be saved in a configuration file
by entering this command:
HP Switch(config)# radius-server key <keystring>
The option < keystring > is the encryption key (in clear text) used for secure
communication with all or a specific RADIUS server.