HP ProCurve 7000dl Series Basic Management And Configuration Manual page 9

2 Controlling Management Access to the ProCurve
Secure Router
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Securing Management Access to the ProCurve Secure Router . . . . . . . . . . 2-4
Restricting Access to the Enable Mode Context . . . . . . . . . . . . . . . . . . 2-4
Configuring a Password for Console Access . . . . . . . . . . . . . . . . . . . . . 2-5
Enabling Remote Access to the ProCurve Secure Router . . . . . . . . . . 2-7
Configuring an Ethernet Interface . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
Configuring Telnet Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Configuring Local User Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
Enabling Access to the Web Browser Interface . . . . . . . . . . . . . . 2-11
Managing SSH Communications . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12
Using FTP to Access the Router . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13
Using the Local User List for Console or Telnet Access . . . . . . . 2-13
Encrypting All the Passwords Configured on the Router . . . . . . . . . 2-13
Enabling Secure Copy Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14
Viewing Information about Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14
Using the AAA Subsystem to Control Management Access . . . . . . . . . . . . 2-15
Advantages of Using the AAA Subsystem . . . . . . . . . . . . . . . . . . . . . . 2-15
Criteria for Failure of Authentication Methods . . . . . . . . . . . . . . 2-16
Enabling the AAA Subsystem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17
Configuring AAA for Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17
Creating a Named List for the Enable Mode Authentication . . . 2-18
Creating a Named List for User Authentication . . . . . . . . . . . . . . 2-19
Assign the Named List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21
Options for AAA Authentication: Configuring Banners,
Messages, and Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22
Configuring Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-24
Creating a Named List to Allow Authorized Users to Access
the Basic Mode Context or the Enable Mode Context . . . . . . . . 2-24
Create a Named List That Allows Authorized Users to
Immediately Enter into the Enable Mode Context . . . . . . . . . . . 2-25
Assign the Named List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-26
Enable Authorization Commands for Console Line . . . . . . . . . . 2-27
v