RADIUS Authentication and Accounting
Commands Authorization
6. Right click and then select
New > key
. Add the vendor Id number that
you determined in step 4 (100 in the example).
7. Restart all Cisco services.
8. The newly created HP RADIUS VSA appears only when you configure an
AAA client (NAS) to use the HP VSA RADIUS attributes. Select Network
Configuration and add (or modify) an AAA entry. In the Authenticate
Using field choose RADIUS(HP) as an option for the type of security
control protocol.
9. Select
Restar
t to effect the change. The HP RADIUS VSA
attributes will appear in Cisco ACS configurations, for example, “Interface
Configuration”, “Group Setup”, “User Setup”.
To enable the processing of the HP-Command-String VSA for RADIUS
accounting:
1. Select
System Configuration
.
2. Select
Logging
.
3. Select
CSV RADIUS Accounting
. In the Select Columns to Log section,
add the HP-Command-String attribute to the Logged Attributes list.
4. Select
Submit
.
5. Select
Network Configuration
. In the AAA Clients section, select an
entry in the AAA Client Hostname column. You will go to the AAA Client
Setup screen.
6. Check the box for
Log Update/Watchdog Packets from this AAA
Client
.
7. Click
Restart
. You should be able to see the HP-Command-
String attribute in the RADIUS accounting reports.
You can enter the commands you wish to allow or deny with the special
characters used in standard regular expressions (c, ., \, [list], [^list], *, ^, $).
Commands must be between 1-249 characters in length.
Example Configuration Using FreeRADIUS
1. Create a dictionary file (for example, dictionary.hp) containing HP VSA
definitions. An example file is:
5-32
Содержание PROCURVE 2910AL
Страница 1: ...Access Security Guide ProCurve Switches W 14 03 2910al www procurve com ...
Страница 2: ......
Страница 3: ...HP ProCurve 2910al Switch February 2009 W 14 03 Access Security Guide ...
Страница 84: ...Configuring Username and Password Security Front Panel Security 2 36 ...
Страница 156: ...TACACS Authentication Operating Notes 4 30 ...
Страница 288: ...Configuring Secure Socket Layer SSL Common Errors in SSL setup 8 22 ...
Страница 416: ...Configuring Advanced Threat Protection Using the Instrumentation Monitor 10 28 ...
Страница 516: ...Configuring Port Based and User Based Access Control 802 1X Messages Related to 802 1X Operation 12 76 ...
Страница 527: ...Configuring and Monitoring Port Security Port Security Figure 13 4 Examples of Show Mac Address Outputs 13 11 ...
Страница 572: ...Using Authorized IP Managers Operating Notes 14 14 ...
Страница 592: ...12 Index ...
Страница 593: ......
Страница 594: ... Copyright 2009 Hewlett Packard Development Company L P February 2009 Manual Part Number 5992 5439 ...