HP E3800-24G-PoE+-2SFP+ Access Security Manual page 11

Commands Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-36
Enabling Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-37
Displaying Authorization Information . . . . . . . . . . . . . . . . . . . . . . . . . 6-38
Configuring Commands Authorization on a RADIUS Server . . . . . . 6-38
Using Vendor Specific Attributes (VSAs) . . . . . . . . . . . . . . . . . . . 6-38
Example Configuration on Cisco Secure ACS for MS Windows 6-40
Example Configuration Using FreeRADIUS . . . . . . . . . . . . . . . . . 6-43
VLAN Assignment in an Authentication Session . . . . . . . . . . . . . . . . 6-44
Tagged and Untagged VLAN Attributes . . . . . . . . . . . . . . . . . . . . . . . . 6-44
Additional RADIUS Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-45
Accounting Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-48
Accounting Service Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-48
Operating Rules for RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . 6-49
Acct-Session-ID Options in a Management Session . . . . . . . . . . . . . . 6-50
Unique Acct-Session-ID Operation . . . . . . . . . . . . . . . . . . . . . . . . 6-50
Common Acct-Session-ID Operation . . . . . . . . . . . . . . . . . . . . . . . 6-52
Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-53
Steps for Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . 6-53
1. Configure the Switch To Access a RADIUS Server . . . . . . . . . 6-54
2. (Optional) Reconfigure the Acct-Session-ID Operation . . . . . 6-56
3. Configure Accounting Types and the Controls for Sending
Reports to the RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-57
4. (Optional) Configure Session Blocking and Interim
Updating Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-61
Viewing RADIUS Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-62
General RADIUS Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-62
RADIUS Authentication Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-64
RADIUS Accounting Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-66
Changing RADIUS-Server Access Order . . . . . . . . . . . . . . . . . . . . . . . 6-67
Dynamic Removal of Authentication
Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-70
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-70
Configuring the RADIUS VSAs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-70
Displaying the Port-access Information . . . . . . . . . . . . . . . . . . . . . . . . 6-72
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-73
ix