Accounting Services; Radius-Administered Cos And Rate-Limiting; Radius-Administered Commands Authorization - HP 3500yl Series Access Security Manual

RADIUS Authentication, Authorization, and Accounting
Overview
Note
6-2
The switch also supports RADIUS accounting for Web Authentication and
MAC authentication sessions.
The switch does not support RADIUS security for SNMP (network manage-
ment) access. For information on blocking access through the WebAgent,
refer to "Controlling WebAgent Access" on page 6-37.

Accounting Services

RADIUS accounting on the switch collects resource consumption data and
forwards it to the RADIUS server. This data can be used for trend analysis,
capacity planning, billing, auditing, and cost analysis.

RADIUS-Administered CoS and Rate-Limiting

The switches covered in this guide take advantage of vendor-specific attri-
butes (VSAs) applied in a RADIUS server to support these optional, RADIUS-
assigned attributes:
802.1p (CoS) priority assignment to inbound traffic on the specified
■
port(s) (port-access authentication only)
Per-Port Rate-Limiting on a port with an active link to an authenti-
■
cated client (port-access authentication only)

RADIUS-Administered Commands Authorization

This feature enables RADIUS server control of an authenticated client's access
to CLI commands on the switch. Refer to "Commands Authorization" on page
6-38.