HP ProCurve Secure 7000dl Series Basic Management And Configuration Manual page 127

The options you can select for the enable mode context are listed in Table 2-1:
Table 2-1. Authentication Options for the Enable Named List
Option
none
line
enable
group [<groupname> | radius |
tacacs+]
For example, you may decide that when a user attempts to access the enable
mode context, you want the ProCurve Secure Router to use the following
authentication methods, in the order they are listed:
TACACS+
enable
You would enter:
ProCurve(config)# aaa authentication enable default group tacacs+ enable
If you enter this command, the ProCurve Secure Router will first try to
authenticate the user through the TACACS+ server. If the TACACS+ server
does not respond, the ProCurve Secure Router will prompt the user to enter
the enable mode password and will check the password that the user enters
against the enable mode password you configured.
For the enable mode password, you do not have to enter another command
to apply the named list. If you are using a RADIUS or TACACS+ server as an
authentication method, you must configure the ProCurve Secure Router to
locate and communicate with that server. For information about the
configuration required for a RADIUS server, see "Configuring a RADIUS
Server for Authentication" on page 2-27. For information about the
configuration required for a TACACS+ server, see "Define the TACACS+
Server" on page 2-31.
Controlling Management Access to the ProCurve Secure Router
Using the AAA Subsystem to Control Management Access
Meaning
No password is required.
Use the password configured for the Telnet line or the
console.
Use the password configured for the enable mode context.
Use one of the following:
• group of RADIUS or TACACS+ servers that you have
configured
• all the RADIUS servers that you have defined (if you have
not defined a group of RADIUS servers)
• all the TACACS+ servers that you have defined (if you have
not defined a group of TACACS+ servers)
2-17