Configuration Example - HP 10500 Series Configuration Manual

Step
3. Enable scheme
authentication.
4. Enable command
authorization.

Configuration example

Network requirements
Configure the device in
commands that are authorized by the HWTACACS server or, when the HWTACACS server is not
available, the device itself.
Figure 22 Network diagram
Configuration procedure
# Assign IP addresses to relevant interfaces and make sure the device and the HWTACACS server can
reach each other and the device and Host A can reach each other. (Details not shown.)
# Enable the Telnet server.
Command
authentication-mode scheme
command authorization
Figure 22 so a user can use Host A to log in to the device and execute only
47
Remarks
By default, authentication is disabled for
the AUX line and password authentication
is enabled for the VTY line.
In VTY line view, this command is
associated with the protocol inbound
command:
•
If the setting of either command is not
the default in VTY line view, the setting
of the other command in VTY line view
takes effect.
•
If the settings of both commands are the
defaults in VTY line view, the settings of
the commands in VTY line class view
take effect.
By default, command authorization is
disabled, and the commands available for
a user only depend on the user role.
If the command authorization command is
configured in user line class view,
command authorization is enabled on all
user lines in the class, and you cannot
configure the undo command
authorization command in the view of a
user line in the class.