Level Switching Authentication For Telnet Users By An Hwtacacs Server - HP 12500 Series Configuration Manual

Port Type=Ethernet,Port Name=GigabitEthernet3/0/1
Initial VLAN=2, Authorized VLAN=4
ACL Group=Disable
CAR=Disable
Priority=Disable
Start=2009-04-26 19:41:12 ,Current=2009-04-26 19:41:25 ,Online=00h00m14s
Total 1 connection matched.
As the Authorized VLAN field in the output shows, VLAN 4 has been assigned to the user.
Level switching authentication for Telnet users by an
HWTACACS server
Network requirements
As shown in
• Use local authentication for the Telnet user and assign the privilege level of 0 to the user after the
user passes authentication.
Use the HWTACACS server for level switching authentication of the Telnet user, and use local
•
authentication as the backup.
Figure 19 Network diagram
Configuration considerations
Configure the switch to use AAA, particularly, local authentication for Telnet users.
1.
Create ISP domain bbb and configure it to use local authentication for Telnet users.
Create a local user account, configure the password, and assign the user privilege level.
On the switch, configure the authentication method for user privilege level switching.
2.
Specify to use HWTACACS authentication and, if HWTACACS authentication is not available,
use local authentication for user level switching authentication.
Configure HWTACACS scheme hwtac and assign an IP address to the HWTACACS server. Set
the shared keys for authenticating AAA packets and specify that usernames sent to the
HWTACACS server carry no domain name. Configure the domain to use the HWTACACS
scheme hwtac for user privilege level switching authentication.
Configure the password for local privilege level switching authentication.
On the HWTACACS server, add the username and password for user privilege level switching
3.
authentication.
Figure 19, configure the switch to:
62