HP ProCurve Switch 6120G/XG Manual page 179

RADIUS Authentication, Authorization, and Accounting
Configuring the Switch for RADIUS Authentication
ProCurve(config)# show authentication
Status and Counters - Authentication Information
Login Attempts : 3
Respect Privilege : Disabled
| Login
Access Task | Primary
----------- + ---------- ---------- ---------- ----------
Console | Local
Telnet | Local
Port-Access | Local
Webui | Local
SSH | Local
Web-Auth | ChapRadius Authorized N/A
MAC-Auth | ChapRadius Authorized N/A
Figure 5-2. Example of AAA Authentication Using Authorized for the Secondary Authentication Method
5-12
Figure 5-2 shows an example of the show authentication command displaying
authorized as the secondary authentication method for port-access, Web-auth
access, and MAC-auth access. Since the configuration of authorized means no
authentication will be performed and the client has unconditional access to
the network, the "Enable Primary" and "Enable Secondary" fields are not
applicable (N/A).
Login
Secondary
None
None
Authorized N/A
None
None
Suppose you already configured local passwords on the switch, but want
RADIUS to protect primary Telnet and SSH access without allowing a second-
ary Telnet or SSH access option (the switch's local passwords):
Enable Enable
Primary Secondary
Local None
Local None
N/A
Local None
Local None
N/A
N/A
The access methods
with secondary
authentication
configured as authorized
allows the client access
to the network even if the
RADIUS server is
unreachable.