HP 10500 Series Configuration Manual page 4

Displaying and maintaining RBAC settings ················································································································· 28
RBAC configuration examples ······································································································································ 28
RBAC configuration example for local AAA authentication users ··································································· 28
RBAC configuration example for RADIUS authentication users ······································································· 30
RBAC temporary user role authorization configuration example (HWTACACS authentication) ················· 33
RBAC temporary user role authorization configuration example (RADIUS authentication) ·························· 38
Troubleshooting RBAC ··················································································································································· 41
Local users have more access permissions than intended ················································································ 41
Login attempts by RADIUS users always fail ······································································································ 41
Login overview ··························································································································································· 43
Using the console port for the first device access ···································································································· 45
Configuring CLI login ················································································································································· 47
CLI overview ··································································································································································· 47
User lines ································································································································································ 47
Login authentication modes ·································································································································· 48
User roles ······························································································································································· 48
FIPS compliance ····························································································································································· 49
Configuring console login ············································································································································· 49
Disabling authentication for console login ········································································································· 49
Configuring password authentication for console login ··················································································· 50
Configuring scheme authentication for console login ······················································································· 51
Configuring common AUX line settings ·············································································································· 51
Configuring Telnet login ················································································································································ 53
Configuring the device as a Telnet server ·········································································································· 54
Using the device to log in to a Telnet server ······································································································ 60
Configuring SSH login ··················································································································································· 61
Configuring the device as an SSH server ··········································································································· 61
Using the device to log in to an SSH server ······································································································· 63
Displaying and maintaining CLI login ························································································································· 63
Accessing the device through SNMP ······················································································································· 65
Controlling user access to the device ······················································································································· 66
FIPS compliance ····························································································································································· 66
Controlling Telnet/SSH logins ······································································································································ 66
Configuration procedures ····································································································································· 66
Configuration example ········································································································································· 67
Controlling SNMP access·············································································································································· 67
Configuration procedure ······································································································································ 67
Configuration example ········································································································································· 68
Configuring command authorization ··························································································································· 69
Configuration procedure ······································································································································ 69
Configuration example ········································································································································· 70
Configuring command accounting ······························································································································· 72
Configuration procedure ······································································································································ 72
Configuration example ········································································································································· 73
Configuring FTP ·························································································································································· 75
FIPS compliance ····························································································································································· 75
Using the device as an FTP server ································································································································ 75
Configuring basic parameters ····························································································································· 76
Configuring authentication and authorization ··································································································· 76
Manually releasing FTP connections ··················································································································· 77
Displaying and maintaining the FTP server ········································································································ 77
ii