Defining Tacacs+ Authentication - HP BladeSystem bc2000 - Blade PC User Manual

◆
RADIUS, Local — Indicates that authentication first occurs at the RADIUS server.
If authentication cannot be verified at the RADIUS server, the session is
authenticated locally. If the session cannot be authenticated locally, the session is
blocked.
◆
Local, RADIUS, None — Indicates that authentication first occurs locally. If
authentication cannot be verified locally, the RADIUS server authenticates the
management method. If the RADIUS server cannot authenticate the management
method, the session is permitted.
◆
RADIUS, Local, None — Indicates that authentication first occurs at the RADIUS
server. If authentication cannot be verified at the RADIUS server, the session is
authenticated locally. If the session cannot be authenticated locally, the session is
permitted.
◆
Local, TACACS+ — Indicates that authentication first occurs locally. If
authentication cannot be verified locally, the TACACS+ server authenticates the
management method. If the TACACS+ server cannot authenticate the management
method, the session is blocked.
◆
TACACS+, Local — Indicates that authentication first occurs at the TACACS+
server. If authentication cannot be verified at the TACACS+ server, the session is
authenticated locally. If the session cannot be authenticated locally, the session is
blocked.
◆
Local, TACACS+, None — Indicates that authentication first occurs locally. If
authentication cannot be verified locally, the TACACS+ server authenticates the
management method. If the TACACS+ server cannot authenticate the management
method, the session is permitted.
◆
TACACS+, Local, None — Indicates that authentication first occurs at the
TACACS+ server. If authentication cannot be verified at the TACACS+ server, the
session is authenticated locally. If the session cannot be authenticated locally, the
session is permitted.
2. Define the Console, Telnet, and Secure Telnet (SSH) fields.
3. Map the authentication method in the Secure HTTP selection box.
4. Map the authentication method in the HTTP selection box.
5. Click

Defining TACACS+ Authentication

Terminal Access Controller Access Control System (TACACS+) provides centralized security
user access validation. The system supports up to four TACACS+ servers.
TACACS+ provides a centralized user management system, while still retaining consistency with
RADIUS and other authentication processes. TACACS+ provides the following services:
■
Authentication — Provides authentication during login and using user names and
user-defined passwords.
■
Authorization — Performed at login. Once the authentication session is completed, an
authorization session starts using the authenticated user name.
The TACACS+ protocol ensures network integrity through encrypted protocol exchanges
between the client and TACACS+ server.
Embedded Web System User Guide
. The authentication mapping is saved, and the device is updated.
www.hp.com
Configuring Device Security
4-1 1