HP ProCurve 9304M Security Manual page 6

Security Guide for ProCurve 9300/9400 Series Routing Switches
S M
PECIFYING A INIMUM
S U L U
ETTING P OCAL SER
C L
ONFIGURING A OCAL
C SSL S
ONFIGURING ECURITY FOR THE
E SSL S
NABLING THE
I D C
MPORTING IGITAL
G SSL C
ENERATING AN
C TACACS/TACACS+ S
ONFIGURING
H TACACS+ D
OW IFFERS FROM
TACACS/TACACS+ A
TACACS/TACACS+ C
I TACACS/TACACS+ S
DENTIFYING THE
S D
PECIFYING IFFERENT
S O TACACS/TACACS+ P
ETTING PTIONAL
C A
ONFIGURING UTHENTICATION
C TACACS+ A
ONFIGURING
C TACACS+ A
ONFIGURING
C I
ONFIGURING AN NTERFACE AS THE
D TACACS/TACACS+ S
ISPLAYING
C RADIUS S
ONFIGURING
RADIUS A
UTHENTICATION
RADIUS C
ONFIGURATION
RADIUS C
ONFIGURATION
C HP-S
ONFIGURING
I RADIUS S
DENTIFYING THE
S D
PECIFYING IFFERENT
S RADIUS P
ETTING
C A
ONFIGURING UTHENTICATION
C RADIUS A
ONFIGURING
C RADIUS A
ONFIGURING
C I
ONFIGURING AN NTERFACE AS THE
D RADIUS C
ISPLAYING
C A
ONFIGURING UTHENTICATION
C C
N ONFIGURATION ONSIDERATIONS FOR
E A
XAMPLES OF UTHENTICATION
C 3
HAPTER
C S
ONFIGURING ECURE
O ..................................................................................................................................................3-1
VERVIEW
SSH V 2 S
ERSION UPPORT
C SSH ....................................................................................................................................3-2
ONFIGURING
S H N
ETTING THE OST
G H
ENERATING A OST
C RSA C
ONFIGURING
S O P
ETTING PTIONAL
iv
P L
ASSWORD ENGTH
A .......................................................................................................2-16
CCOUNTS
U A .............................................................................................2-17
SER CCOUNT
W M
EB ANAGEMENT
HP D
ERVER ON THE EVICE
RSA P
ERTIFICATES AND
....................................................................................................2-20
ERTIFICATE
.........................................................................................2-20
ECURITY
TACACS .........................................................................................2-20
, A
UTHENTICATION UTHORIZATION
C
ONFIGURATION ONSIDERATIONS
ERVERS
S I
ERVERS FOR NDIVIDUAL
ARAMETERS
-M L
ETHOD ISTS FOR
.........................................................................................2-29
UTHORIZATION
..............................................................................................2-32
CCOUNTING
S
OURCE FOR
TATISTICS AND
............................................................................................................2-38
ECURITY
, A ,
UTHORIZATION
C
ONSIDERATIONS
P ..............................................................................................2-42
ROCEDURE
A
PECIFIC TTRIBUTES ON THE
HP D
ERVER TO THE
S I
ERVERS FOR NDIVIDUAL
........................................................................................................2-44
ARAMETERS
-M L
ETHOD ISTS FOR
.............................................................................................2-47
UTHORIZATION
.................................................................................................2-48
CCOUNTING
S
OURCE FOR
I
ONFIGURATION NFORMATION
-M L ........................................................................................2-54
ETHOD ISTS
A
UTHENTICATION
-M L
ETHOD ISTS
S ..................................................................... 3-1
HELL
...................................................................................................................3-1
D N
AME AND OMAIN AME
RSA K P ...................................................................................................3-3
EY AIR
-R A
HALLENGE ESPONSE
.........................................................................................................3-6
ARAMETERS
......................................................................................2-16
I .....................................................2-19
NTERFACE
................................................................................2-19
K F ........................................................2-19
RIVATE EY ILES
, A
AND CCOUNTING
....................................................................2-24
...............................................................................2-25
AAA F ...................................................2-25
UNCTIONS
.....................................................................2-26
TACACS/TACACS+ .........................................2-27
A TACACS/TACACS+ P
LL
C I
ONFIGURATION NFORMATION
A ..........................................................2-39
AND CCOUNTING
......................................................................................2-42
RADIUS S ....................................................2-42
ERVER
......................................................................2-43
EVICE
AAA F ...................................................2-44
UNCTIONS
RADIUS ............................................................2-45
A RADIUS P
LL ACKETS
..........................................................................2-50
-M L
ETHOD ISTS
..................................................................................2-56
......................................................................................3-3
..............................................................3-4
UTHENTICATION
.......................................2-21
......................2-33
ACKETS
..............................2-33
.........................................2-49
.........................................2-55
June 2005