Radius Authentication And Authorization For Telnet Users By A Switch - HP 5500 HI Series Configuration Manual

super
telnet
tracert
When switching to user privilege level 3, the Telnet user only needs to enter password enabpass
as prompted.
<Switch> super 3
Password:
User privilege level is 3, and only those commands can be used
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
If the HWTACACS server is not available, the Telnet user needs to enter password 654321 as
prompted for local authentication.
<Switch> super 3
Password:
Error: Invalid configuration or no response from the authentication server.
Info: Change authentication mode to local.
Password:
User privilege level is 3, and only those commands can be used
whose level is equal or less than this.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
RADIUS authentication and authorization for Telnet users by a
switch
Network requirements
As shown in
authorization for the Telnet user on port 1645.
Configure Switch A to use the RADIUS server for Telnet user authentication and authorization, and to
remove the domain name in a username sent to the server.
Set the shared keys for secure communication between the NAS and the RADIUS server to abc.
Figure 18 Network diagram
Telnet user
192.168.1.2
Configuration procedure
1. Assign an IP address to each interface as shown in
2. Configure the NAS:
# Enable the Telnet server on Switch A.
<SwitchA> system-view
[SwitchA] telnet server enable
# Configure Switch A to use AAA for Telnet users.
[SwitchA] user-interface vty 0 4
Set the current user priority level
Establish one TELNET connection
Trace route function
Enter the password for HWTACACS privilege level switch authentication
Enter the password for local privilege level switch authentication
Figure 18, configure Switch B to act as a RADIUS server to provide authentication and
NAS
Vlan-int3
192.168.1.1/24
Switch A
RADIUS server
Vlan-int2
Vlan-int2
10.1.1.1/24
10.1.1.2/24
Figure
60
Switch B
18. (Details not shown.)