HP ProCurve 9304M Security Manual page 59

HP's Vendor-ID is 11, with Vendor-Type 1. The following table describes the HP vendor-specific attributes.
Attribute Name
hp-privilege-level
hp-command-string
hp-command-exception-flag
Identifying the RADIUS Server to the HP Device
To use a RADIUS server to authenticate access to an HP device, you must identify the server to the HP device.
For example:
ProCurveRS(config)# radius-server host 209.157.22.99
June 2005
Table 2.5: HP vendor-specific attributes for RADIUS
Attribute ID Data Type
1 integer
2 string
3 integer
Securing Access to Management Functions
Description
Specifies the privilege level for the user.
This attribute can be set to one of the
following:
0 Super User level – Allows complete
read-and-write access to the system.
This is generally for system
administrators and is the only
management privilege level that
allows you to configure passwords.
4 Port Configuration level – Allows read-
and-write access for specific ports but
not for global (system-wide)
parameters.
5 Read Only level – Allows access to
the Privileged EXEC mode and
CONFIG mode of the CLI but only
with read access.
Specifies a list of CLI commands that are
permitted or denied to the user when
RADIUS authorization is configured.
The commands are delimited by semi­
colons (;). You can specify an asterisk (*)
as a wildcard at the end of a command
string.
For example, the following command list
specifies all show and debug ip
commands, as well as the write terminal
command:
show *; debug ip *; write term*
Specifies whether the commands indicated
by the hp-command-string attribute are
permitted or denied to the user. This
attribute can be set to one of the following:
0 Permit execution of the commands
indicated by hp-command-string, deny
all other commands.
1 Deny execution of the commands
indicated by hp-command-string,
permit all other commands.
2 - 43