Configuring Aaa Schemes; Configuring Local Users - HP 3600 v2 Series Security Configuration Manual
Hide thumbs
Also See for 3600 v2 Series:
- Command reference manual (510 pages) ,
- Configuration manual (449 pages) ,
- Installation manual (62 pages)
Table of Contents
Advertisement
Task
Configuring AAA
methods for ISP domains
Tearing down user connections
Configuring a NAS ID-VLAN binding
Specifying the device ID used in stateful failover mode
Configuring a switch as a RADIUS server
NOTE:
To use AAA methods to control access of login users, you must configure the user interfaces to use AAA by
using the authentication-mode command. For more information about the configuration command, see
Fundamentals Command Reference
Configuring AAA schemes
Configuring local users
To implement local user authentication, authorization, and accounting, you must create local users and
configure user attributes on the switch. The local users and attributes are stored in the local user database
on the switch. A local user is uniquely identified by a username. Configurable local user attributes are as
follows:
•
Service type
Types of services that the user can use. Local authentication checks the service types of a local user. If
none of the service types is available, the user cannot pass authentication.
Service types include FTP, LAN access, Portal, SSH, Telnet, terminal, and web.
User state
•
Indicates whether or not a local user can request network services. There are two user states: active and
blocked. A user in active state can request network services, but a user in blocked state cannot.
Maximum number of users using the same local user account
•
Indicates how many users can use the same local user account for local authentication.
Validity time and expiration time
•
Indicates the validity time and expiration time of a local user account. A user must use a valid local user
account to pass local authentication. When some users need to access the network temporarily, you can
Configuring HWTACACS schemes
Creating an ISP domain
Configuring ISP domain attributes
Configuring AAA authentication methods for
an ISP domain
Configuring AAA authorization methods for an
ISP domain
Configuring AAA accounting methods for an
ISP domain
.
16
Remarks
Required
Optional
Required
Complete at least one task.
Optional
Optional
Optional
Optional
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
