Configuring Radius Schemes - HP 3600 v2 Series Security Configuration Manual

To do...
Configure the authorization attributes for
the user group
Set the guest attribute for the user group
Displaying and maintaining local users and local user groups
To do...
Display local user information
Display the user group configuration
information

Configuring RADIUS schemes

A RADIUS scheme specifies the RADIUS servers that the switch can cooperate with and defines a set of
parameters that the switch uses to exchange information with the RADIUS servers. There may be
authentication/authorization servers and accounting servers, or primary servers and secondary servers.
The parameters include the IP addresses of the servers, the shared keys, and the RADIUS server type.
RADIUS scheme configuration task list
Task
Creating a RADIUS scheme
Specifying the RADIUS authentication/authorization servers
Specifying the RADIUS accounting servers and the relevant parameters
Specifying the shared keys for secure RADIUS communication
Specifying the VPN to which the servers belong
Setting the username format and traffic statistics units
Setting the supported RADIUS server type
Use the command...
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute |
level level | user-profile profile-name |
vlan vlan-id | work-directory
directory-name } *
group-attribute allow-guest
Use the command...
display local-user [ idle-cut { disable |
enable } | service-type { ftp |
lan-access | portal | ssh | telnet |
terminal | web } | state { active |
block } | user-name user-name | vlan
vlan-id ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
display user-group [ group-name ] [ |
{ begin | exclude | include }
regular-expression ]
20
Remarks
Optional
By default, no
authorization attribute is
configured for a user
group.
Optional
By default, the guest
attribute is not set for a
user group, and guest
users created by a guest
manager through the
web interface cannot
join the group.
Remarks
Available in any view
Available in any view
Remarks
Required
Required
Optional
Optional
Optional
Optional
Optional