Aaa Configuration Considerations And Task List - HP FlexFabric 5930 Series Security Configuration Manual

No. Sub-attribute
25 Result_Code
26 Connect_ID
28 Ftp_Directory
29 Exec_Privilege
59 NAS_Startup_Timestamp
60 Ip_Host_Addr
61 User_Notify
62 User_HeartBeat
140 User_Group
141 Security_Level
201 Input-Interval-Octets
202 Output-Interval-Octets
203 Input-Interval-Packets
204 Output-Interval-Packets
205 Input-Interval-Gigawords
206 Output-Interval-Gigawords
207 Backup-NAS-IP
255 Product_ID

AAA configuration considerations and task list

To configure AAA, complete these tasks on the NAS:
1. Configure the required AAA schemes.
Local authentication—Configure local users and the related attributes, including the usernames
and passwords, for the users to be authenticated.
Remote authentication—Configure the required RADIUS and HWTACACS schemes.
Description
Result of the Trigger-Request or SetPolicy operation, zero for success and
any other value for failure.
Index of the user connection.
FTP user working directory. When the RADIUS client acts as the FTP
server, this attribute is used to set the FTP directory for an FTP user on the
RADIUS client.
EXEC user priority.
Startup time of the NAS in seconds, which is represented by the time
elapsed after 00:00:00 on Jan. 1, 1970 (UTC).
User IP address and MAC address included in authentication and
accounting requests, in the format A.B.C.D hh:hh:hh:hh:hh:hh. A space
is required between the IP address and the MAC address.
Information that must be sent from the server to the client transparently.
Hash value assigned after an 802.1X user passes authentication, which
is a 32-byte string. This attribute is stored in the user list on the NAS and
verifies the handshake packets from the 802.1X user. This attribute only
exists in Access-Accept and Accounting-Request packets.
User groups assigned after the SSL VPN user passes authentication. A
user can belong to multiple user groups that are separated by
semi-colons. This attribute is used to work with the SSL VPN device.
Security level assigned after the SSL VPN user passes security
authentication.
Number of bytes input within a real-time accounting interval.
Number of bytes output within a real-time accounting interval.
Number of packets input within an accounting interval in the unit set on
the NAS.
Number of packets output within an accounting interval in the unit set on
the NAS.
Amount of bytes input within an accounting interval, in units of 4G bytes.
Amount of bytes output within an accounting interval, in units of 4G
bytes.
Backup source IP address for sending RADIUS packets.
Product name.
14