Configuring Radius Schemes - HP 12500 Series Configuration Manual

Step
4. Configure the authorization
attributes for the user group.
5. Set the guest attribute for the
user group.
Displaying and maintaining local users and local user groups
Task
Display local user information. (In
standalone mode)
Display local user information. (In IRF
mode)
Display the user group configuration
information.

Configuring RADIUS schemes

A RADIUS scheme specifies the RADIUS servers that the switch can cooperate with and defines a set of
parameters that the switch uses to exchange information with the RADIUS servers. There may be
authentication/authorization servers and accounting servers, or primary servers and secondary servers.
The parameters include the IP addresses of the servers, the shared keys, and the RADIUS server type.
RADIUS scheme configuration task list
Task
Creating a RADIUS scheme
Command
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute
| level level | user-profile
profile-name | vlan vlan-id |
work-directory directory-name } *
group-attribute allow-guest
Command
display local-user [ idle-cut { disable |
enable } | service-type { ftp |
lan-access | portal |ssh | telnet |
terminal | web } | state { active |
block } | user-name user-name | vlan
vlan-id ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
display local-user [ idle-cut { disable |
enable } | service-type { ftp |
lan-access | portal | ssh | telnet |
terminal | web } | state { active |
block } | user-name user-name | vlan
vlan-id ] [ chassis chassis-number slot
slot-number ] [ | { begin | exclude |
include } regular-expression ]
display user-group [ group-name ] [ |
{ begin | exclude | include }
regular-expression ]
24
Remarks
Optional.
By default, no authorization
attribute is configured for a user
group.
The switch does not support the
user-profile keyword.
Optional.
By default, the guest attribute is not
set for a user group, and guest
users created by a guest manager
through the Web interface cannot
join the group.
Remarks
Available in any view.
The ftp and telnet
keywords are not
supported in FIPS mode.
Available in any view.
The ftp and telnet
keywords are not
supported in FIPS mode.
Available in any view.
Remarks
Required.