HP PROCURVE 2910AL, Руководство по обеспечению безопасности доступа

Страница: 150 / 594

Authentication
How Authentication Operates
How Authentication Operates
General Authentication Process Using a
Server
Authentication through a server operates generally as described
below. For specific operating details, refer to the documentation you received
with your server application.
ProCurve Switch
Configured for
Operation
First-Choice
Server
B
ProCurve Switch
Configured for
Operation
Terminal “ A ” Directly Accessing This
Switch Via Switch’s Console Port
Terminal “ B ” Remotely
Accessing This Switch Via Telnet
A
Second-Choice
Server
(Optional)
Third-Choice
Server
(Optional)
Figure 4-8. Using a Server for Authentication
Using figure 4-8, above, after either switch detects an operator’s logon request
from a remote or directly connected terminal, the following events occur:
1. The switch queries the first-choice server for authentication
of the request.
• If the switch does not receive a response from the first-choice
server, it attempts to query a secondary server. If the
switch does not receive a response from any server,
then it uses its own local username/password pairs to authenti­
cate the logon request. (See “Local Authentication Process” on
page 4-25.)
• If a server recognizes the switch, it forwards a user-
name prompt to the requesting terminal via the switch.
2. When the requesting terminal responds to the prompt with a username,
the switch forwards it to the server.
3. After the server receives the username input, the requesting terminal
receives a password prompt from the server via the switch.
4-24