Radius Authentication And Accounting; Contents - HP ProCurve Switch 2900yl-24G Access Security Manual

RADIUS Authentication and Accounting

Contents

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3
Authentication Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3
Accounting Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4
RADIUS-Administered CoS and Rate-Limiting . . . . . . . . . . . . . . . . . . . 5-4
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4
Switch Operating Rules for RADIUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
General RADIUS Setup Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-7
Configuring the Switch for RADIUS Authentication . . . . . . . . . . . . . 5-8
Outline of the Steps for Configuring RADIUS Authentication . . . . . . 5-9
1. Configure Authentication for the Access Methods
You Want RADIUS To Protect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
2. Enable the (Optional) Access Privilege Option . . . . . . . . . . . . . . . . 5-12
3. Configure the Switch To Access a RADIUS Server . . . . . . . . . . . . 5-13
4. Configure the Switch's Global RADIUS Parameters . . . . . . . . . . . 5-15
Local Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-19
Controlling Web Browser Interface Access . . . . . . . . . . . . . . . . . . . . 5-20
Configuring RADIUS Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-21
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-21
Commands Authorization Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-21
Enabling Authorization with the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . 5-22
Showing Authorization Information . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Configuring the RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-23
Using Vendor Specific Attributes (VSAs) . . . . . . . . . . . . . . . . . . . 5-23
Example Configuration on Cisco Secure ACS for MS Windows 5-25
Example Configuration Using FreeRADIUS . . . . . . . . . . . . . . . . . 5-28
Configuring RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-29
Operating Rules for RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . 5-30
5
5-1